CVE-2026-74848 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue. - 漏洞详情

漏洞编号：CVE-2026-74848

风险等级：未知

漏洞来源：CVE

CVE 编号：CVE-2026-74848

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-444

发布/更新时间：2026-08-27 / 2026-08-28

漏洞描述

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX.

An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes.

This issue affects Apache APISIX: from 2.12.0 through 3.17.0.

Users are recommended to upgrade to version 3.18.0, which fixes the issue.

漏洞描述

相关链接

相关漏洞