Approved changes feed: RSS · Atom

cpe:2.3:a:akamai:ghost:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAkamai (bfd5e9bc-dd58-519e-92ae-adc2722405b1)
ProductGhost (19c098bb-0ed2-549a-8ac2-60f83797ee4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26365 vulnerable 2026-06-08 07:53:21.622084 Details available
MEDIUM (4)
Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection: Transfer-Encoding" could result in a forward request with invalid message framing, depending on the Akamai processing path. This could result in the origin server parsing the request body incorrectly, leading to HTTP request smuggling.
Published: 2026-02-23T00:00:00.000Z
Updated: 2026-02-23T20:58:59.805Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.