CVE-2026-27585 | caddyserver caddy up to 2.11.0 Configuration input validation

February 24, 2026 Yanac

A vulnerability classified as critical was found in caddyserver caddy up to 2.11.0. This impacts an unknown function of the component Configuration Handler. Executing a manipulation can lead to improper input validation.

This vulnerability is registered as CVE-2026-27585. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More