PGV-2640802

Disclosed on June 03, 2026 (updated June 03, 2026)

Vulnerability Overview

PGV-2640802 is a category 1 vulnerabilty that affects the following packages:

debian/varnish source, forky, versions (all)
debian/varnish source, trixie, versions < 7.7.0-3+deb13u1

CVSS Score: unfiled

Risk Assessment

The risk assessment shows that this vulnerability is exlpoited by a unknown attacker. The attacker profile cannot be determined due to insufficient information.

The impact is contained to the application. Exploitation remains confined to the application and cannot affect the host environment or external systems.

The threat damage has no data available. Insufficient information is available to determine the potential impact of this vulnerability.

Vulnerability Details

No vulnerability details were provided.

Common Weakness Enumerations

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Additional References

https://vinyl-cache.org/security/VSV00019.html

Your Risk Profile

Network Exposure	External Accessable from the public internet
Access Interface	WebBrowser Primarily web-based applications
Service Outage	Disruptive Operations would be impacted
Data Breach	Disruptive Operations would be impacted
Data Tampering	Disruptive Operations would be impacted
Customize

Additional Identifiers

DEBIAN-CVE-2026-50052