Lucene search
+L

110 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/07 4:28 p.m.4 views

CVE-2026-30852

Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the...

6.9CVSS5.7AI score0.00401EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2026/03/07 4:28 p.m.8 views

CVE-2026-30852

Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the...

7.5CVSS7.7AI score0.00401EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2026/03/07 4:28 p.m.5 views

CVE-2026-30852

Caddy is an extensible server platform that uses TLS by default. From version 2.7.5 to before version 2.11.2, the varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the...

7.5CVSS5.7AI score0.00401EPSS
Exploits1
OSV
OSV
added 2026/03/06 11:40 p.m.1 views

GHSA-M2W3-8F23-HXXF Caddy's vars_regexp double-expands user input, leaking env vars and files

Summary The varsregexp matcher in vars.go:337 double-expands user-controlled input through the Caddy replacer. When varsregexp matches against a placeholder like http.request.header.X-Input, the header value gets resolved once expected, then passed through repl.ReplaceAll again the bug. This mean...

6.9CVSS5.8AI score0.00401EPSS
Exploits1References5
Snyk
Snyk
added 2026/03/06 11:38 p.m.4 views

Header Injection

Overview Affected versions of this package are vulnerable to Header Injection in the parseCaddyfile function. An attacker can inject arbitrary values into trusted identity headers by supplying crafted HTTP headers when authenticated with a valid token, leading to unauthorized privilege escalation...

8.8CVSS5.9AI score0.00249EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/06 11:38 p.m.2 views

Header Injection

Overview Affected versions of this package are vulnerable to Header Injection in the parseCaddyfile function. An attacker can inject arbitrary values into trusted identity headers by supplying crafted HTTP headers when authenticated with a valid token, leading to unauthorized privilege escalation...

8.8CVSS5.9AI score0.00249EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/02/28 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-27588

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP host request matcher is documented as case-insensitive, b...

9.1CVSS6AI score0.0037EPSS
Exploits1References3
OSV
OSV
added 2026/02/26 4:27 p.m.6 views

GO-2026-4537 Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2...

8.2CVSS5.5AI score0.00166EPSS
Exploits1References3
OSV
OSV
added 2026/02/26 4:27 p.m.6 views

GO-2026-4539 Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2...

9.3CVSS5.4AI score0.00267EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/02/26 12:25 a.m.4 views

SUSE CVE-2026-27585

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations...

8.2CVSS5.8AI score0.00323EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/02/26 12:24 a.m.5 views

SUSE CVE-2026-27589

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API default listen 127.0.0.1:2019 exposes a state-changing POST /load endpoint that replaces the entire running configuration. When origin enforcement is not enabled enforceorigin not...

8.2CVSS5.8AI score0.00166EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2026/02/26 12:24 a.m.2 views

SUSE CVE-2026-27590

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path. This is unsafe for Unicode because...

9.8CVSS6AI score0.00542EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-27586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, two swallowed errors in ClientAuthentication.provision cause mTLS clie...

9.3CVSS5.8AI score0.00267EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-27585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize...

8.2CVSS7.2AI score0.00323EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-27589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the local caddy admin API default listen 127.0.0.1:2019 exposes a...

8.2CVSS6AI score0.00166EPSS
Exploits1References3
Snyk
Snyk
added 2026/02/24 8:39 p.m.2 views

Incorrect Behavior Order: Validate Before Canonicalize

Overview Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize via the splitPos function. An attacker can cause unintended execution of files by crafting URLs with specific Unicode characters that manipulate the path splitting logic, potentiall...

9.8CVSS6.1AI score0.00542EPSS
Exploits1References2
Snyk
Snyk
added 2026/02/24 8:37 p.m.4 views

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the adminLoad.handleLoad process. An attacker can modify the running configuration and alter server behavior by sending cross-origin requests to the local admin API when origin enforcement is not...

8.2CVSS5.9AI score0.00166EPSS
Exploits1References2
Snyk
Snyk
added 2026/02/24 8:37 p.m.4 views

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the adminLoad.handleLoad process. An attacker can modify the running configuration and alter server behavior by sending cross-origin requests to the local admin API when origin enforcement is not...

8.2CVSS5.9AI score0.00166EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2026/02/24 8:16 p.m.11 views

Caddy: Improper sanitization of glob characters in file matcher may lead to bypassing security protections

Summary The path sanitization in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. Details The tryfiles directive is used to rewrite the request uri. It accepts a list of patterns and checks if any files exist in the root that match the...

8.2CVSS5.6AI score0.00323EPSS
Exploits1References8Affected Software1
NVD
NVD
added 2026/02/24 5:29 p.m.13 views

CVE-2026-27588

Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, Caddy's HTTP host request matcher is documented as case-insensitive, but when configured with a large host list 100 entries it becomes case-sensitive due to an optimized matching path. An attacker can bypass...

9.1CVSS0.0037EPSS
Exploits1References2
Rows per page
Query Builder