CVE-2026-95115
Published Oct 13, 2026
Description
Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser
Is your site exposed to CVE-2026-95115?
Run a free security scan — no signup, results in seconds.
References
Other References
https://gist.github.com/1820893135-pixel/d4246b2ecc927193ea1fad50810e9901
https://github.com/warmcat/libwebsockets/commit/736a4a26fce344766bc6618df87bf32193829dd0
https://github.com/warmcat/libwebsockets/commit/c404a205a98323a7f60e69fae532c5d26bf4a62a
https://github.com/warmcat/libwebsockets/issues/3663
Frequently Asked Questions
What is CVE-2026-95115? +
Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser
How do I check if I'm vulnerable to CVE-2026-95115? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.