fabiolb

Products

ProductCVEsExploitedLatest
fabio2–Sep 21, 2026

Exploited and recent CVEs

  • CVE-2026-62987 Medium 5.8 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header 0.2%
  • CVE-2025-48865 Critical 9.1 Fabio allows HTTP clients to manipulate custom headers it adds 0.5%