CVE-2026-90584

A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft_6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.

• CWE-400
• CWE-770

• https://github.com/TooTallNate/Java-WebSocket/
• https://github.com/TooTallNate/Java-WebSocket/issues/1508
• https://github.com/TooTallNate/Java-WebSocket/pull/1509
• https://vuldb.com/cve/CVE-2026-90584
• https://vuldb.com/submit/913786
• https://vuldb.com/vuln/403169
• https://vuldb.com/vuln/403169/cti

Published

Sep 13, 2026

Last Modified

Sep 13, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90579A vulnerability has been found in cheshire-cat-ai Cheshire C…7.3
• CVE-2026-9058For untrusted certificates that contain the "Authority Infor…9.3
• CVE-2026-90580A vulnerability was found in FlowiseAI Flowise up to 3.0.2. …6.3
• CVE-2026-90581A vulnerability was determined in cym1102 nginxWebUI up to 4…6.3
• CVE-2026-90582A vulnerability was identified in evanchiu serverless-todo 1…5.3
• CVE-2026-90583A security flaw has been discovered in kagisearch smallweb u…4.3
• CVE-2026-9059NextGEN Gallery version prior to 4.2.1 are vulnerable to aut…9.3
• CVE-2026-90593A vulnerability was determined in embedded-graphics up to 0.…7.3
• CVE-2026-90594A vulnerability was identified in wxiaoqi Spring-Cloud-Platf…6.3
• CVE-2026-90595A security flaw has been discovered in wxiaoqi Spring-Cloud-…6.3
• CVE-2026-9060The Store Locator WordPress plugin before 1.6.6 does not san…3.5
• CVE-2026-9061The Store Locator WordPress plugin before 1.6.9 does not san…3.5