CVE-2026-34475 in varnish-software Varnish Cache
요약 (영어)
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.
책임이 있는
MITRE
예약하다
2026. 03. 27.
공개
2026. 03. 27.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354027 | varnish-software Varnish Cache 원격 코드 실행 | 180 | 정의되지 않음 | 공식 수정 | CVE-2026-34475 |