CVE-2026-72813 — actix-files before 0.6.10 Denial of Service via empty Range header
actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote atta…
Published: 2026-08-14 · CVSS: 6.9 · CVSS 4.0
actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files. When panic is set to abort, remote attackers can crash the process on-demand by sending a GET request with an empty Range header.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7