N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing

A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 id: CVE-2026-86206 info: name: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing author:...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="127.0.0.1...

CVE-2025-48799-

CVE-2025-48799 – Apache Tomcat Remote Code Execution PoC This repository contains a proof-of-concept exploit for CVE-2025-48799, a remote code execution vulnerability discovered in Apache Tomcat 9.0.48. The flaw stems from an integer overflow in the HTTP header parser, which can be triggered by a...

CVE-2022-46169

Cacti | Auth Bypass | RCE | CVE-2022-46169 Cacti: Unauthenticated Remote Code Execution Exploit in Ruby Cacti Docker This is a dockerized application that is vulnerable to the Cacti RCE vulnerability CVE-2022-46169. Follow the link to get Cacti running...

CVE-2026-126083

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

CVE-2026-126083

A flaw was found in Action Pack. When deployed behind a reverse proxy that passes client-supplied headers through unchanged, the remote Internet Protocol IP address resolution mechanism prioritizes the Forwarded header over the X-Forwarded-For header without verifying consistency between them. An...

Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

Impact Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a reverse proxy appends the client address to X-Forwarded-For but passes a client-supplied...

CVE-2026-126083

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

EUVD-2026-122936

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

CVE-2026-126083 Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

CVE-2026-126083 Action Pack: Possible IP spoofing in Action Dispatch RemoteIp

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

CVE-2026-126083

The Action Pack framework (Rails 8.1.0 through 8.1.4) is vulnerable to IP spoofing when running with Rack 3 . The vulnerability exists because ActionDispatch::RemoteIp derives request.remote_ip from Rack::Request#forwarded_for, which prioritizes the RFC 7239 Forwarded header over X-Forwarded-For....

CVE-2026-126083

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

PT-2026-144759

Name of the Vulnerable Software and Affected Versions Action Pack versions 8.1 through 8.1.4 Description ActionDispatch::RemoteIp derives request.remote ip from Rack::Requestforwarded for, which under Rack 3 prioritizes the RFC 7239 Forwarded header over X-Forwarded-For. If a reverse proxy append...

CVE-2026-126083: rails: Action Pack is a framework for handling and responding to web requests

Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remoteip from Rack::Requestforwardedfor, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a...

CVE-2026-57209

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTTP header after executing the matched rule pipeline by inserting the incoming request's Host header value directly int...

CVE-2026-57210

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded for= parameter and X-Forwarded-For headers and exposes them as...

CVE-2026-57210 Heimdall: IP Spoofing via Unvalidated Forwarding Headers

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded for= parameter and X-Forwarded-For headers and exposes them as...

EUVD-2026-108750

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trustedproxies option is configured, heimdall extracts client IP addresses from the Forwarded for= parameter and X-Forwarded-For headers and exposes them as...

CVE-2026-57210

The Heimdall cloud-native Identity Aware Proxy and Access Control Decision service is vulnerable to IP spoofing in versions prior to 0.17.17 . When the trusted_proxies option is enabled, the software extracts client IP addresses from Forwarded and X-Forwarded-For headers but fails to validate the...