Home › CVE Intelligence › CVE-2026-59725
CVSS 7.5 HIGH Security Vulnerability

CVE-2026-59725: Socket.IO: Engine.IO Polling Transport Connection Exhaustion

Impact An unauthenticated remote attacker can cause a denial of service in affected versions of engine.io by opening Engine.IO polling sessions and sending an invalid binary POST request with: `` Content-Type: applicati…

7.5CVSS Score
HIGHSeverity
NOCISA KEV
0.4%EPSS Score
Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-59725
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeSecurity Vulnerability
CVSS Score7.5 (HIGH)
EPSS Score0.4% probability of exploitation in the next 30 days
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

#

Impact

An unauthenticated remote attacker can cause a denial of service in affected versions of engine.io by opening Engine.IO polling sessions and sending an invalid binary POST request with:

`` Content-Type: application/octet-stream ``

against an Engine.IO proto... [Full analysis available on Pro]

🎯 Known Indicators of Compromise

{"type":"domain","value":"socket.io","confidence_score":0.75,"first_seen":"2026-07-21","source_count":1} {"type":"domain","value":"engine.io","confidence_score":0.75,"first_seen":"2026-07-21","source_count":1}
⚡ DETECTION RULES AVAILABLE

Get CVE-2026-59725 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence