Tag
#HTTP/3
Understanding the New HTTP QUERY Method and Its Implications
The IETF published RFC 10008 in June 2026, defining a new HTTP method called 'QUERY'. This addition to the HTTP protocol, the first new standard verb since 'PATCH' in 2010, introduces changes and potential security considerations that need to be understood and addressed by security practitioners and technical learners.
Understanding and Defending Against CVE-2026-90678: HTTP Request Smuggling in HAProxy
CVE-2026-90678 is a vulnerability in HAProxy, a popular load balancer and reverse proxy server. The vulnerability allows for HTTP request smuggling on reused backend connections, potentially leading to security bypass and data loss. This analysis provides an in-depth look at the vulnerability, its exploitation mechanics, and defensive strategies.
Traefik HTTP/3 mTLS Bypass Vulnerability: A Deep Dive Analysis
A critical vulnerability in Traefik's HTTP/3 (QUIC) TLS configuration selection allows unauthenticated clients to bypass router-specific mTLS enforcement, potentially exposing confidential data or privileged backend operations.