Understanding and Defending Against CVE-2026-90678: HTTP Request Smuggling in HAProxy
CVE-2026-90678 is a vulnerability in HAProxy, a popular load balancer and reverse proxy server. The vulnerability allows for HTTP request smuggling on reused backend connections, potentially leading to security bypass and data loss. This analysis provides an in-depth look at the vulnerability, its exploitation mechanics, and defensive strategies.