CVE-2026-42034 — Axios is a promise based HTTP client for the browser and

title: CVE-2026-42034 - Axios Stream Upload Bypass
id: scw-2026-04-24-ai-1
status: experimental
level: medium
description: |
  Detects potential exploitation of CVE-2026-42034 by identifying POST requests to upload endpoints that contain 'axios' in the URI or referer, and are served via JavaScript files. This bypasses the maxBodyLength limit for streamed uploads when maxRedirects is set to 0, allowing oversized uploads.
author: SCW Feed Engine (AI-generated)
date: 2026-04-24
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-42034/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-method:
          - 'POST'
      cs-uri-query|contains:
          - '/upload'
      cs-uri|contains:
          - '.js'
  selection_base:
      sc-status:
          - '200'
  selection_indicators:
      uri|contains:
          - 'axios'
      referer|contains:
          - 'axios'
  condition: selection AND selection_base AND selection_indicators
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse