CVE-2026-34475
Fixed in a distro release EPSS <1%CVSS 5.4
Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass.
Products: varnish-software varnish_cache
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | varnish | no fix |
| Debian 13 | varnish | 7.7.0-3+deb13u2 |
| Ubuntu 14.04 LTS | varnish | no fix |
| Ubuntu 24.04 LTS | varnish | no fix |
| Ubuntu 25.10 | varnish | no fix |
| Ubuntu 26.04 LTS | varnish | no fix |
| Ubuntu 26.10 | varnish | no fix |
| Ubuntu Pro 16.04 LTS | varnish | no fix |
| Ubuntu Pro 18.04 LTS | varnish | no fix |
| Ubuntu Pro 20.04 LTS | varnish | no fix |
| Ubuntu Pro 22.04 LTS | varnish | no fix |