CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. See the original NVD description below for full technical details.
CVE
CVE-2026-12549
Severity
MEDIUM
CVSS
4.8
EPSS
0.41%
Original NVD Description
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading to malformed HTTP 206 responses and log flooding.
Related CVEs
Other vulnerabilities affecting the same vendor(s)