CVE-2026-25577

Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core.http.wrappers.Request does not handle CookieError exceptions when parsing malformed Cookie headers. This allows unauthenticated attackers to trigger HTTP 500 errors and cause denial of service. This vulnerability is fixed in 1.3.11.

• CWE-248
• CWE-307

• https://github.com/emmett-framework/core/commit/9557ea23a27cbadf7774d8bca6bbe4b54fa8a3ec
• https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76
• https://github.com/emmett-framework/core/security/advisories/GHSA-x6cr-mq53-cc76

Published

Feb 10, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25571A vulnerability has been identified in SICAM SIAPP SDK (All …5.5
• CVE-2026-25572A vulnerability has been identified in SICAM SIAPP SDK (All …5.5
• CVE-2026-25573A vulnerability has been identified in SICAM SIAPP SDK (All …7.8
• CVE-2026-25574Payload is a free and open source headless content managemen…5.4
• CVE-2026-25575NavigaTUM is a website and API to search for rooms, building…7.5
• CVE-2026-25576ImageMagick is free and open-source software used for editin…5.5
• CVE-2026-25578Navidrome is an open source web-based music collection serve…6.1
• CVE-2026-25579Navidrome is an open source web-based music collection serve…6.5
• CVE-2026-2558A flaw has been found in GeekAI up to 4.2.4. The affected el…6.3
• CVE-2026-25580Pydantic AI is a Python agent framework for building applica…8.6
• CVE-2026-25581SCEditor is a lightweight WYSIWYG BBCode and XHTML editor. P…5.4
• CVE-2026-25582iccDEV provides a set of libraries and tools that allow for …7.8