CVE-2026-69243: Premature Http Upgrade Body Skipcve-2026-69243-premature-http-upgrade-body-skip
Prematurely setting connection upgrade state or conditioning payload reader creation on upgrade status allows unread request body bytes to linger in the buffer, causing HTTP request smuggling (CWE-444).