OESA-2026-4694

Dashboard / Vulnerabilities / OESA-2026-4694

OESA-2026-4694

Summary: libwebsockets security update

Details: Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es): A vulnerability classified as critical has been found in libwebsockets (affected version unknown). CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-114550)

References: https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4694, https://nvd.nist.gov/vuln/detail/CVE-2026-114550