CVE-2021-40540: Ulfius Project Ulfius

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check for certain malformed HTTP requests.

Affected products

• Ulfius Project Ulfius: before 2.7.4 (fixed in 2.7.4)

Published 2021-09-07. Last modified 2026-06-17.