수정 버전
설치된 버전 확인
caddy version2.11 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2026-27590 | Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusio... | 8.9 | — | 2026-02-25 | |
| CVE-2026-27586 | Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed | 8.8 | — | 2026-02-25 | |
| CVE-2026-30851 | Caddy forward_auth copy_headers Does Not Strip Client-Supplied Headers, Allowing Identity Injection and Privil... | 8.1 | — | 2026-03-08 | |
| CVE-2026-45135 | Caddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files | 8.1 | — | 2026-06-24 | |
| CVE-2026-52845 | Caddy: FastCGI header normalization bypass in `forward_auth copy_headers` | 8.1 | — | 2026-06-24 | |
| CVE-2026-27587 | Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass | 7.7 | — | 2026-02-25 | |
| CVE-2026-27588 | Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass | 7.7 | — | 2026-02-25 | |
| CVE-2026-52844 | Caddy: Windows `file_server` path authorization bypass via encoded backslash | 7.5 | — | 2026-06-24 | |
| CVE-2026-27585 | Caddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections | 6.9 | — | 2026-02-25 | |
| CVE-2026-27589 | Caddy vulnerable to cross-origin config application via local admin API /load (caddy) | 6.9 | — | 2026-02-25 | |
| CVE-2026-30852 | Caddy: vars_regexp double-expands user input, leaking env vars and files | 5.5 | — | 2026-03-08 | |
| CVE-2026-45692 | Caddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization | 5.4 | — | 2026-06-24 | |
| CVE-2026-52846 | Caddy: stripHTML template function bypass | 4.2 | — | 2026-06-24 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).