CVE-2026-39880

Remnawave Backend vulnerability CVE-2026-39880 affects the Remnawave Backend (HWID device registration logic). Before version 2.7.5, an authenticated user can bypass the HWID device limit and register more devices, enabling subscription resales and excessive traffic. Root cause: a race condition ...