Tag
#QUIC
blogHIGH 7.5
Understanding and Defending Against CVE-2026-90678: HTTP Request Smuggling in HAProxy
CVE-2026-90678 is a vulnerability in HAProxy, a popular load balancer and reverse proxy server. The vulnerability allows for HTTP request smuggling on reused backend connections, potentially leading to security bypass and data loss. This analysis provides an in-depth look at the vulnerability, its exploitation mechanics, and defensive strategies.
blogCRITICAL 9.0
Understanding the Netty QUIC Token Handler Vulnerability
A vulnerability in Netty's default QUIC token handler allows an attacker to bypass anti-amplification limits, potentially leading to denial-of-service attacks. The issue arises from the token handler's improper validation of client-supplied tokens.