Vulnerabilities
Apache Traffic Server Patches Critical HTTP Request Smuggling Flaw in CVE-2026-111809
Apache Traffic Server releases updates for versions 8.0 through 10.2 to fix a critical request smuggling vulnerability involving HEAD requests.
HTTP Request Smuggling
Everything Threat Times has reported about HTTP Request Smuggling: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft Fixes Critical HTTP Request Smuggling Flaw in ASP.NET Core
Microsoft has released patches for a critical vulnerability in ASP.NET Core that allows unauthorized network tampering through HTTP request smuggling.