CVE-2026-93567

Description

HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled :authority

Affected Platforms

Weakness Type

CWE-20

References

• https://access.redhat.com/security/cve/CVE-2026-93567
• https://bugzilla.redhat.com/show_bug.cgi?id=2536955