FA
Product
fabio
2
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch
Add fabio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48865 | 9.1 | May 30 | Fabio allows HTTP clients to manipulate custom headers it adds Affected: < 1.6.6 |
| CVE-2026-62987 | 5.8 | Sep 21 | Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header Affected: >= 1.6.6, < 1.7.2 |
Showing 2