# caddy security updates Patch Radar has 32 security fixes for caddy, closing 13 CVEs. The newest is DEBIAN-CVE-2026-77281 (2.11.4-1), released September 20, 2026. - Web page: https://patchblox.com/security/product/linux/caddy - Platform: Linux - Supported: yes ## Security fixes, newest first | Fix | Released | Fixed in | Priority | CVEs | Exploited | |---|---|---|---|---:|---:| | [DEBIAN-CVE-2026-77281](https://patchblox.com/security/data/fix/linux/debian-cve-2026-77281.md) | Sep 20, 2026 | Debian 14 2.11.4-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-77281](https://patchblox.com/security/data/fix/linux/debian-cve-2026-77281.md) | Sep 20, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-52844](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52844.md) | Jun 23, 2026 | Debian 14 2.11.4-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-52845](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52845.md) | Jun 23, 2026 | Debian 14 2.11.4-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-52845](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52845.md) | Jun 23, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-52845](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52845.md) | Jun 23, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | High | 1 | 0 | | [DEBIAN-CVE-2026-52846](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52846.md) | Jun 23, 2026 | Debian 14 2.11.4-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-52846](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52846.md) | Jun 23, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-52846](https://patchblox.com/security/data/fix/linux/debian-cve-2026-52846.md) | Jun 23, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-45692](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45692.md) | Jun 23, 2026 | Debian 14 2.11.4-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-45692](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45692.md) | Jun 23, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-45692](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45692.md) | Jun 23, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-45135](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45135.md) | Jun 23, 2026 | Debian 14 2.11.4-1 | High | 1 | 0 | | [DEBIAN-CVE-2026-27590](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27590.md) | Feb 24, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27590](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27590.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27590](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27590.md) | Feb 24, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27588](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27588.md) | Feb 24, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27588](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27588.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27588](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27588.md) | Feb 24, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27589](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27589.md) | Feb 24, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-27589](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27589.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-27589](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27589.md) | Feb 24, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-27587](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27587.md) | Feb 24, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27587](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27587.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27587](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27587.md) | Feb 24, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27586](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27586.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Urgent | 1 | 0 | | [DEBIAN-CVE-2026-27585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27585.md) | Feb 24, 2026 | Debian 13.5 (trixie) 2.6.2-12+deb13u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-27585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27585.md) | Feb 24, 2026 | Debian 14 2.11.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2026-27585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27585.md) | Feb 24, 2026 | Debian 12.15 (bookworm) 2.6.2-5+deb12u1 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-28923](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28923.md) | Feb 6, 2023 | Debian 12.15 (bookworm) 2.5.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-28923](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28923.md) | Feb 6, 2023 | Debian 13.5 (trixie) 2.5.2-1 | Routine | 1 | 0 | | [DEBIAN-CVE-2022-28923](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28923.md) | Feb 6, 2023 | Debian 14 2.5.2-1 | Routine | 1 | 0 | --- Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo