All verified exploits

CVE-2026-2833 Pingora HTTP Request Smuggling

CVE-2026-2833 is a critical-severity vulnerability. AttackerView checks Pingora sites for it with a live exploit check.

Pentest critical Pingora Added cve-verified-cve-2026-2833

Is my site vulnerable to CVE-2026-2833?

Detects Cloudflare Pingora reverse proxies at version 0.7.0 or earlier, where the HTTP/1.1 parser prematurely switches to pass-through mode on requests with an Upgrade header — before the backend confirms with 101 Switching Protocols. An attacker can smuggle arbitrary HTTP requests that bypass all proxy-level security controls (WAF, ACL, rate limiting).

Is your app exploitable through CVE-2026-2833?

Scan your domain free