CVE-2026-62899

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

This Moderate impact flaw in System.Net.HttpListener on Red Hat platforms running .NET Core allows for a security feature bypass. The vulnerability arises from incorrect parsing of the Content-Length header, potentially affecting applications that utilize HttpListener to process HTTP requests.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.