CVE-2026-34475

Summary

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.

Affected Software

VendorProductVersion RangeStatus
varnish-softwareVarnish Cache0 < 6.0.17 LTSaffected
varnish-softwareVarnish Cache7.0.0 < 8.0.1affected

Weaknesses

  • CWE-180: CWE-180 Incorrect Behavior Order: Validate Before Canonicalize

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References