CVE-2026-88809

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

EUVD-2026-115258

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2026-88809

A Server-Side Request Forgery (SSRF) vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy). The flaw occurs because the allowlist decision was evaluated in a logic path that failed to prevent requests from being forwarded; while rejected destinations were logged, the ...

CVE-2026-88809: SUSE Rancher: A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

PT-2026-135505

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

SUSE CVE-2026-88809

A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint /meta/proxy. This endpoint is intended to forward requests only to destinations that appear on a configured allowlist. The allowlist decision was evaluated in a place where it could not stop a request from being...

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

CVE-2021-21975

CVE-2021-21975 SSRF-POC - ssrf to cred leak First configure pd client. Now run ./pd deploy http-new-requests now replace the pipedream http request ex: Randomstring.m.pipedream.net in the script run this in a seperate terminal - ./pd logs new-requests | tee -a req.txt and now run this in another...

CVE-2023-27163

CVE-2023-27163 This is a PoC for CVE-2023-27163 which is a SSRF vulnerability present in request-baskets upto v1.2.1. This vulnerability allows attackers to access sensitive network resources via /api/baskets/name. The request-baskets contains a functionality where a user can specify another serv...

CVE-2021-40438

CVE-2021-40438 Requesting a uri-path can cause modproxy to forward the request to an origin server selected by a remote user. This issue affects Apache HTTP Server 2.4.48 and earlier versions. Attackers can exploit this vulnerability by crafting a request with a uri-path, which causes modproxy to...

CVE-2026-76182

In Eclipse Jetty, TryPathsHandler and TryFilesFilter can be configured to forward requests to template URIs such as index?p=$path, where $path is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of /s&a=1 when applied to the...

CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user

Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...

CVE-2026-77802

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests containing multiple Content-Length headers with conflicting values are forwarded verbatim to the origin server, while...

CVE-2026-77803

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A request that contains both a Content-Length and a Transfer-Encoding header is forwarded with both headers present,...

CVE-2026-77803 Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A request that contains both a Content-Length and a Transfer-Encoding header is forwarded with both headers present,...

CVE-2026-77803

Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021 , contains a front-end request desynchronization vulnerability in the proxy request forwarding component. The root cause is that the software forwards requests containing both Content-Length and Transfer-Encoding ...

EUVD-2026-92426

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A request that contains both a Content-Length and a Transfer-Encoding header is forwarded with both headers present,...

CVE-2026-77802 HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests containing multiple Content-Length headers with conflicting values are forwarded verbatim to the origin server, while...

CVE-2026-77802

Progress Telerik Fiddler Classic for Windows versions prior to v6.0.20262.10021 are vulnerable to HTTP request smuggling in the proxy request forwarding component. The issue arises because the software forwards requests with multiple conflicting Content-Length headers verbatim, while only using t...

CVE-2026-77802 HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests containing multiple Content-Length headers with conflicting values are forwarded verbatim to the origin server, while...