medium5.4
CVE-2026-34475
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, poten…
Impact
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Varnish-Software | Varnish Enterprise | through 6.0.15 Version 6.0.16 |
| Vinyl-Cache | Vinyl Cache | before 8.0.1 |