Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-93567

1 brief RSS
high advisory

Improper Translation of HTTP/1 CONNECT to HTTP/2 Headers

A vulnerability exists where HTTP/1 authority-form CONNECT requests are incorrectly translated into malformed HTTP/2 CONNECT requests, allowing for attacker control over the :authority header and potential request smuggling.

cve-2026-93567 request-smuggling proxy vulnerability
1c