CVE-2026-103262

Vendor

Canonical

CVSS

7.5

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 14
   Ubuntu notice Ubuntu 10d ago

   Tornado vulnerabilities

   It was discovered that Tornado did not properly handle certain HTTP requests and network inputs. An attacker could possibly use these issues to cause a denial of service, expose sensitive information, or bypass access controls.…

   CVE-2023-54397CVE-2024-14029CVE-2026-91990+3 more Canonical
2. 10
   CVE NVD 1 Oct 2026

   Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause…

   Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a…

   CVSS 7.5 CVE-2026-103262