CA
Vendor
caddyserver
23
CVEs
1
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92700 | CA caddy caddyserver | 6.3 | Sep 23 | Caddy: fileHidden() case-sensitive pattern bypass — exposes "hidden" files via case variation |
| CVE-2026-92284 | CA caddy caddyserver | 6.9 | Sep 23 | Caddy: Unbounded body buffer via {http.request.body} placeholder — memory exhaustion DoS |
| CVE-2026-77281 | CA caddy caddyserver | 6.5 | Sep 17 | Caddy: rewrite placeholder re-expansion |
| CVE-2026-45135 | CA caddy caddyserver | 8.1 | Jun 23 | Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files |
| CVE-2026-45692 | CA caddy caddyserver | 3.8 | Jun 23 | Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization |
| CVE-2026-52845 | CA caddy caddyserver | 8.1 | Jun 23 | Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` |
| CVE-2026-52844 | CA caddy caddyserver | 7.5 | Jun 23 | Caddy: Windows `file_server` path authorization bypass via encoded backslash |
| CVE-2026-52846 | CA caddy caddyserver | 4.2 | Jun 23 | Caddy: stripHTML template function bypass |
| CVE-2026-30851 | CA caddy caddyserver | 8.8 | Mar 7 | Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privilege Escalation |
| CVE-2026-30852 | CA caddy caddyserver | 7.5 | Mar 7 | Caddy: vars_regexp double-expands user input, leaking env vars and files |
| CVE-2026-27590 | CA caddy caddyserver | 9.8 | Feb 24 | Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport |
| CVE-2026-27589 | CA caddy caddyserver | 6.5 | Feb 24 | Caddy vulnerable to cross-origin config application via local admin API /load (caddy) |
| CVE-2026-27588 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass |
| CVE-2026-27587 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass |
| CVE-2026-27586 | CA caddy caddyserver | 9.1 | Feb 24 | Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed |
| CVE-2026-27585 | CA caddy caddyserver | 6.5 | Feb 24 | Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections |
| CVE-2023-50463 | CA Caddy Caddyserver | 6.5 | Dec 10 | The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof their source IP address via an… |
| CVE-2023-44487 In wildKEV | CA Caddy Caddyserver | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability |
| CVE-2022-28923 | CA Caddy Caddyserver | 6.1 | Feb 6 | Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via crafted URLs |
| CVE-2022-34037 | CA Caddy Caddyserver | 7.5 | Jul 22 | An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI |
| CVE-2022-29718 | CA Caddy Caddyserver | 6.1 | Jun 2 | Caddy v2.4 was discovered to contain an open redirect vulnerability |
| CVE-2018-21246 | CA Caddy Caddyserver | 9.8 | Jun 15 | Caddy before 0.10.13 mishandles TLS client authentication, as demonstrated by an authentication bypass caused by the lack of the StrictHostMatching mode |
| CVE-2018-19148 | CA Caddy Caddyserver | 3.7 | Nov 10 | Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames |