THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-59725 (HIGH 7.5) — Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an u

[NVD] CVE-2026-59725 (HIGH 7.5) — Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an u

mednvdPublished 2026-07-08

CVE-2026-59725 CVSS: 7.5 HIGH Published: 2026-07-08T16:16:33.133

Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated attacker to exhaust server-side connect

Indicators of compromise

CVE-2026-59725cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-59725