CVE-2026-57489: Authentication Bypass by Spoofing

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTHBYPASS enabled trust the configured reverse-proxy identity header without verifying that the request originated from FRTRUSTEDPROXIES. When the...

PT-2026-114355

Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX Open Source affected versions not specified Description A flaw exists in the ngx http v3 module module. When HTTP/3 is used in conjunction with the proxy request buffering directive set to on, a...

PT-2026-113649

Name of the Vulnerable Software and Affected Versions Akamai Guardicore Platform Agent versions prior to 7.4 Description A use-after-free issue exists in the Windows WFP packet-capture driver. This occurs when an IPv6 proxy/redirect rule is active, allowing a local attacker with Administrator...

PT-2026-113650

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent GPA for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflow...

EUVD-2026-100832

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent GPA for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflow...

CVE-2026-50216

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent GPA for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflow...

CVE-2026-110835: Improper Neutralization of CRLF Sequences

FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token Cookie: msts= is not rejected and is written by httpproxyconnect into the CONNECT request line and Host header. A remote unauthenticated RDP client connecting to a prox...

Linux Distros Unpatched Vulnerability : CVE-2026-85747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.manifests.Get reads a manifest returned for a...

PT-2026-113742

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An HTTP proxy can trick libcurl into sending the origin's credentials, such as Basic passwords or Negotiate/Kerberos tickets, directly to the proxy. This occurs when the proxy responds to a...

PT-2026-113746

A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim t...

PT-2026-114149

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0 through 3.31.0 Description An HTTP header injection issue exists in the proxy component. This occurs because a lone Line Feed LF character within the target portion of a routing token, specifically in the Cookie: msts=...

Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. SocketsHttpHandler can retain a...

GHSA-WXXW-5CVC-53J7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. SocketsHttpHandler can retain a...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...