CVE-2026-32627 - Vulnerability Analysis

Overview

cpp-httplib < 0.37.2 contains a broken authentication caused by disabled TLS certificate and hostname verification on HTTPS redirects when using proxy and follow location, letting network attackers intercept redirected HTTPS connections, exploit requires attacker to control redirect response.

Severity & Score

Impact

Network attackers can intercept redirected HTTPS connections, capturing credentials and session tokens, leading to full man-in-the-middle attacks.

Mitigation

Update to version 0.37.2 or later.

References

• https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-c3h8-fqq4-xm4g

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner