CVE-2026-93569

Description

HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target authority

Affected Platforms

Weakness Type

CWE-444

References

• https://access.redhat.com/security/cve/CVE-2026-93569
• https://bugzilla.redhat.com/show_bug.cgi?id=2536962