Skip to content
OpenAdvisories

Vendor

higress-group

1 known vulnerabilities.

Products

higress 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-92790

    Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie Header

    Higress before 2.2.4 panics when processing a Cookie header segment without an equals sign, causing the plugin wrapper to recover and return a continue action that bypasses AI token rate limiting. Unauthenticated attackers can craft a malformed Cookie header …

    higress-group higress