CVE-2026-26365 | Akamai Ghost 2025-03-26/2025-07-21/2025-11-17 Custom Hop-by-Hop HTTP Header request smuggling

A vulnerability was found in Akamai Ghost 2025-03-26/2025-07-21/2025-11-17. It has been classified as problematic. This issue affects some unknown processing of the component Custom Hop-by-Hop HTTP Header Handler. Performing a manipulation results in http request smuggling.

This vulnerability was named CVE-2026-26365. The attack may be initiated remotely. There is no available exploit.

This product is a managed service, so users do not have direct control over vulnerability countermeasures. Upgrading the affected component is recommended.