Search: CVE-2026-55202

CVE-2026-55202 is an authentication bypass vulnerability in tinyproxy versions up to 1.11.3. The flaw occurs because tinyproxy fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the proxy's statistics page or bypass access controls by manipulating the Host header or port. This can lead to unauthorized access to internal proxy statistics or misrouting of requests as transparent proxy connections.