cloudflare pingora Schwachstellen (CVE)

Für cloudflare pingora veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

4 Ergebnisse
8.4Hoch
CVE-2026-2836

Cache poisoning via insecure-by-default cache key

Cloudflare https://github.com/cloudflare/pingora

A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excluding critical factors su…

9.3Kritisch
CVE-2026-2835

HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing

Cloudflare https://github.com/cloudflare/pingora

An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Tran…

9.3Kritisch
CVE-2026-2833

HTTP Request Smuggling via Premature Upgrade

Cloudflare https://github.com/cloudflare/pingora

An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing an Upgrade header, causing the proxy to pass through the rest of the bytes on t…

7.4Hoch
CVE-2025-4366

Request Smuggling Vulnerability in Pingora

Pingora

A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request execution and potential cache poisonin…