VULNERABILITY INTELLIGENCE

CVE-2025-54142

CVSS score4 MEDIUM

EPSS probability0.27%

CISA KEVNot currently listed

Published2025-08-29

Last modified2026-10-18

Description

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.