HTTP/1 Host Mismatch Vulnerability in Red Hat Products
CVE-2026-93569

8.2HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Build Of Apache Camel 3.33.3.sp2; Red Hat Build Of Quarkus 3.27.5.sp2; Red Hat Build Of Quarkus 3.33.3.sp2; Red Hat AMQ Broker 7
Vendor: CVE Published:; 18 September 2026

What is CVE-2026-93569?

This vulnerability arises from an HTTP/1 absolute-form Host mismatch, which is incorrectly translated to the HTTP/2 :authority header. This misconfiguration can lead to potential issues in request-target authority management, allowing malicious actors to exploit the vulnerability to manipulate request flows within affected Red Hat products. As a result, this could jeopardize the integrity and confidentiality of the data being processed by the systems.