CVE-2026-75514

creationtimestamp| type| source ---|---|--- 2026-08-20 20:13:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/37n72ggnfljth...

CVE-2026-75514 BunkerWeb: rDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot

BunkerWeb is an open-source, next-generation Web Application Firewall. Prior to 1.6.13, the blacklist, greylist, and antibot modules in src/common/core/blacklist/blacklist.lua, src/common/core/greylist/greylist.lua, and src/common/core/antibot/antibot.lua trust PTR suffix matches in IGNORERDNS,...