Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

labstack echo vulnerabilities and fixes

Exploited and high-severity labstack echo vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.5CVE-2026-118650Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served pathVerify fixlabstack echo
    1 min read
  2. 9.1CVE-2026-118264Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsVerify fixlabstack echo
    1 min read
  3. 8.2CVE-2026-118260Echo: BodyDump captures request and response bodies without size limits in v4Verify fixlabstack echo
    1 min read
  4. 8.2CVE-2026-118262Echo: WebSocket proxy can retain connections and handlers after client disconnectVerify fixlabstack echo
    1 min read
Esc