CVE-2026-27585

A flaw was found in Caddy, an extensible server platform. The path sanitization routine in the file matcher component does not properly sanitize backslashes. This vulnerability can be exploited by users with specific Caddy and environment configurations, potentially leading to the bypass of...

CVE-2026-27585

creationtimestamp| type| source ---|---|--- 2026-02-23 04:21:54+00:00| published-proof-of-concept| https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4 2026-02-25 03:40:19+00:00| seen| https://gist.github.com/alon710/cc12d45654c7a0339d51fb9dbbc8ed7f...