Kasapski Nozhove@kasapskinozhove
@punnean Caddy 2026 сентябрь: CVE-2026-92700, CVE-2026-92284, CVE-2026-77281
1001043
1.2K followersView on X
CVE-2026-92284
LOWCVSS 6.9 · MEDIUMImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, in modules/caddyhttp/replacer.go, resolving http.request.body reads the complete request body with an unbounded io.Copy before request-body middleware limits apply, allowing memory exhaustion and process termination.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-770
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE