VULNERABILITY INTELLIGENCE

CVE-2026-32688

CVSS score8.7 HIGH

EPSS probability0.55%

CISA KEVNot currently listed

Published2026-04-27

Last modified2026-10-26

Description

Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion. Plug.Cowboy.Conn.conn/1 in lib/plug/cowboy/conn.ex calls String.to_atom/1 on the value returned by :cowboy_req.scheme/1. For HTTP/…