SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-68762

MediumCVSS 5.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.29%

21th percentile - higher than 21% of all known CVEs

Summary

In JetBrains Ktor before 3.4.1, a potential Denial of Service (DoS) attack via WebSocket decompression was possible.

Risk Assessment

An attacker could cause server overload, leading to application unavailability.

Recommendation

Update Ktor to version 3.4.1 or later to fix the vulnerability.

Other vulnerabilities in JetBrains Ktor

Original NVD description (English source)

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible

Vulnerability data from NVD (NIST) · CISA KEV · EPSS