CVE-2026-77463

A flaw was found in Remark42. The application trusts client-supplied HTTP forwarding headers to determine the client's IP address without verifying that requests originate from a trusted proxy. A remote attacker can exploit this vulnerability by sending spoofed IP headers, allowing them to bypass...