CVE-2026-111249
— UNSCOREDPublished 2026-11-10 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket connections from any origin. A network attacker, or a web page visited by the developer, can observe the names of changed files in the watched folder and the server version, and reach the deployed applications through the additional port. This only affects LiveReload enabled in the embedded Maven plugin. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, which fix the issue.
Weaknesses
CWE-1327
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100868PoC
- HIGHCVE-2026-108760PoC
- HIGHCVE-2026-112136
- CRITICALCVE-2026-112346PoC
- HIGHCVE-2026-119249
- HIGHCVE-2026-59177PoC
- CRITICALCVE-2026-92559
- UNSCOREDCVE-2026-97849
Related by shared AI tags and CWE weakness class. Browse the full archive.