MehranTurk/CVE-2026-31908

PoC

This proof-of-concept (PoC) exploit targets CVE-2026-31908, a critical header injection vulnerability affecting Apache APISIX versions 2.12.0 through 3.15.0

view exploit source poc_in_githubauthor MehranTurkpublished 2026-04-19catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-31908US	—	0.52% (44th)	Exploit	2026-04-14
Header injection vulnerability in Apache APISIX. The attacker can take advantage of certain configuration in forward-auth plugin to inject malicious headers. This issue affects Ap…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan