CVE-2025-41082 - HTTP Request/Response Smuggling in Altitude Communication Server

CVE ID : CVE-2025-41082 Published : Jan. 26, 2026, 9:24 a.m. | 6 minutes ago Description : Illegal HTTP request traffic vulnerability (CL.0) in Altitude Communication Server, caused by inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection using Content-Length headers. This can cause a desynchronization of requests between frontend and backend servers, which could allow request hiding, cache poisoning or security bypass. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...