{"id":"EM-20261103-7IES","url":"https://cyber.eventmonitor.net/incident/EM-20261103-7IES/","type":"cve","title":"Angular Vulnerability (CVE-2026-111751)","subtitle":"CVE-2026-111751","subject":"CVE-2026-111751","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-03T21:16:57.800Z","firstSignal":"2026-11-03T20:58:04.000Z","lastSignal":"2026-11-03T21:16:57.800Z","updated":"2026-11-04T14:43:58.877Z","revision":1,"life":[{"status":"Born","at":"2026-11-03T21:16:57.800Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-03T21:16:57.800Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-03T20:58:04.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-03T21:16:57.800Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261103-7IES created."}],"stages":[{"name":"Disclosed","at":"2026-11-03T21:16:57.800Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-03T21:16:57.800Z","detail":"CVSS 8.2 · EPSS 0.7%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-03T20:58:04.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-03T20:58:04.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":3,"title":"Red Hat: CVE-2026-111751 (important)","text":"@angular/router: @angular/router: Denial of Service via query parameter memory retention during server-side rendering","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-111751.json"},{"at":"2026-11-03T21:16:57.800Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-111751 (CVSS 8.2)","text":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 21.2.0 until 21.2.25 and 22.2.1, RouterLink directives rendered during Node.js server-side rendering retain computed UrlTree instances for the lifetime of each request. When queryParamsHandling is set to merge or preserve, either per link or through defaultQueryParamsHandling, every rendered link can retain a copy of attacker-controlled query parameters in its UrlTree. When upstream proxies or load balancers forward oversized query strings without rejecting t","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111751"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-03T21:16:57.800","score":8.2,"severity":"HIGH","desc":"Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 21.2.0 until 21.2.25 and 22.2.1, RouterLink directives rendered during Node.js server-side rendering retain computed UrlTree instances for the lifetime of each req","product":"","seen":1793803438877},"kev":null,"epss":{"epss":0.00659,"pct":0.51665,"at":1793803438877},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}