CVE-2026-40395

A flaw was found in Varnish Enterprise. A remote attacker can exploit this vulnerability by sending a request with an excessive number of header fields. This can cause a "workspace overflow" within the vmodheaderplus module, leading to a daemon panic and crashing the Varnish Enterprise server. Th...