Request Smuggling is a vulnerability tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed December 19, 2025; most recent activity March 10, 2026.
Request Smuggling is an HTTP-layer vulnerability where crafted requests are interpreted differently by front-end proxies and back-end servers, allowing an attacker to smuggle requests through boundaries and potentially bypass security controls, hijack sessions, or poison caches. The SUSE advisory ties this class of flaw to Netty via CVE-2025-67735, labeling it as a moderate severity issue and highlighting its impact on layered HTTP deployments common in modern web apps.
Cloudflare identified and patched HTTP/1.x request smuggling vulnerabilities in the Pingora open source framework. These vulnerabilities, reported through their Bug Bounty Program, are tracked as CVE-2026-2833,…
SUSE and openSUSE released updates for netty to address a moderate security issue identified as CVE-2025-67735. The vulnerability involves a lack of URI sanitization in `HttpRequestEncoder`, which can lead to CRLF…