CVE-2026-71485

creationtimestamp| type| source ---|---|--- 2026-08-20 21:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtk6wmwavx2e 2026-08-20 22:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtkapah7c62u 2026-08-20 22:08:12+00:00| seen|...

CVE-2026-71485

Centrifugo (open-source real-time messaging server) prior to 6.9.0 contains a header spoofing vulnerability in its proxy and transport layers. The client-controlled protocol.ConnectRequest.headers map is copied through OnClientConnecting, ConnectEvent.Headers, and SetEmulatedHeadersToContext, and...