https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:33:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-257805 EUVD-2026-257805 https://cve.radiocsirt.org/vuln/euvd-2026-257805 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12642 <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks.</p> <p>Successful exploitation may allow an attacker to:</p> <p>* Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions</p> <p>This issue affects lighttpd1.4.80</p> <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks.</p> <p>Successful exploitation may allow an attacker to:</p> <p>* Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions</p> <p>This issue affects lighttpd1.4.80</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12642 https://cve.radiocsirt.org/vuln/ghsa-fvx8-q97q-cw73 <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks.</p> <p>Successful exploitation may allow an attacker to:</p> <p>* Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions</p> <p>This issue affects lighttpd1.4.80</p> <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks.</p> <p>Successful exploitation may allow an attacker to:</p> <p>* Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions</p> <p>This issue affects lighttpd1.4.80</p> https://cve.radiocsirt.org/vuln/ghsa-fvx8-q97q-cw73 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12642 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lighttpd, Ubuntu:Pro:16.04:LTS: lighttpd, Ubuntu:Pro:18.04:LTS: lighttpd, Ubuntu:20.04:LTS: lighttpd, Ubuntu:22.04:LTS: lighttpd, Ubuntu:24.04:LTS: lighttpd, Ubuntu:25.10: lighttpd, Ubuntu:26.04:LTS: lighttpd</p> <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks. Successful exploitation may allow an attacker to: * Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions This issue affects lighttpd1.4.80</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: lighttpd, Ubuntu:Pro:16.04:LTS: lighttpd, Ubuntu:Pro:18.04:LTS: lighttpd, Ubuntu:20.04:LTS: lighttpd, Ubuntu:22.04:LTS: lighttpd, Ubuntu:24.04:LTS: lighttpd, Ubuntu:25.10: lighttpd, Ubuntu:26.04:LTS: lighttpd</p> <p>lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing. This behavior can be exploited to conduct HTTP Header Smuggling attacks. Successful exploitation may allow an attacker to: * Bypass access control rules * Inject unsafe input into backend logic that trusts request headers * Execute HTTP Request Smuggling attacks under some conditions This issue affects lighttpd1.4.80</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12642 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2477 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in lighttpd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in lighttpd ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2477