What is CVE-2026-63385?

CVE-2026-63385 is a security advisory published by Microsoft Security Response Center (MSRC) with Critical severity. Libevent: HTTP header handling bugs create risk of access control bypass.

Which CVE IDs does CVE-2026-63385 cover?

CVE-2026-63385 covers the following CVE IDs: CVE-2026-63385. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2026-63385?

CVE-2026-63385 affects 5 products, including: azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0; azl3 libevent 2.1.12-1 on Azure Linux 3.0; azl3 lldpd 1.0.22-1 on Azure Linux 3.0; azl3 mysql 8.0.46-1 on Azure Linux 3.0; azl3 ntp 4.2.8p17-2 on Azure Linux 3.0.