Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-73276 Details

UNDERGOING ENRICHMENT

The CVE is currently being enriched by the Volerion team. The enrichment process results in the association of reference link tags, CVSS, and CPE applicability statement data.

Description

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cna.erlef.org/cves/CVE-2026-73276.html EEF
https://github.com/erlang/otp/commit/60add5a19e2154560fdff3fe92dba14a68bbd683 EEF
https://github.com/erlang/otp/commit/6cd995e34d3bb3d36dd278dded2d62c25e71820c EEF
https://github.com/erlang/otp/commit/c285240c6e4b93960c5dc4f17ba04e6fdfb27a0f EEF
https://github.com/erlang/otp/security/advisories/GHSA-6v7q-jwgh-cx8p EEF

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')EEF

Affected Products

This vulnerability is currently being analyzed

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-73276
NVD Published Date:
Sep 1, 2026
NVD Last Modified:
Sep 8, 2026
Source:
EEF
CVE-2026-73276 Details - Not Deferred