Forward-Auth โ€” PoC Archivehttps://poc.intelseclab.com/tags/forward-auth/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Apache APISIX forward-auth CRLF Header Injection โ€” CVE-2026-31908https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-31908-apisix-crlf-header-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-31908-apisix-crlf-header-injection/Critical severity (CVSS 10) โ€” web ยท CVE-2026-31908. Status: PoC. Affects: Apache APISIX. Tags: apisix, crlf-injection, header-injection, authentication-bypass, forward-auth, api-gateway, reverse-proxy.webCriticalapisixcrlf-injectionheader-injectionauthentication-bypassforward-authapi-gatewayreverse-proxy