August 6, 2026
- aiohttp request smuggling PoC published (CVE-2026-69243): a rejected WebSocket upgrade in aiohttp 3.14.1 causes request-body skipping, enabling smuggling and control bypasses; fixed in 3.14.2 (glitchedcat). · Vulnerabilities & Exploits
in OpenAI's Rogue-Agent Post-Mortem: A Swarm That Rebuilt Its Own Message Board