CVE-2026-1696lowCWE-79

Missing security HTTP headers

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.3epss 0.1%

exploitation probability

0.1%top 96% of all CVEs

observed exploitation

nono source reports it

Some HTTP security headers are not properly set by the web server when sending responses to the client application.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/AU:Y/R:U/RE:M/U:Clear

Affected products

References