CVE-2026-54387criticalCWE-444

CVE-2026-54387: falha crítica em tinyproxy

Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar tinyproxy+ Monitorar tinyproxy

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.4%
Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbatim to the backend while using Content-Length to determine how many request body bytes to consume. Remote attackers can desynchronize the proxy and backend parser state, allowing injection of arbitrary HTTP requests to the backend to enable cache poisoning, access control bypass, and request hijacking.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
tinyproxy · tinyproxy
CVEs relacionadas — tinyproxy

No mesmo produto, das mais perigosas para as menos.

CVE-2026-3945HIGHtinyproxy Integer Overflow in HTTP Chunked Transfer-Encoding Parser Leading to Denial of ServiceEPSS 0.6%CVE-2026-54388CRITICALTinyproxy - HTTP Request Smuggling via Duplicate Content-Length HeadersEPSS 0.4%CVE-2026-55202HIGHTinyproxy - Stathost Detection Bypass via Host Header ManipulationEPSS 0.4%CVE-2026-125371MEDIUMTinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix MatchEPSS —