CVE-2026-108522

The Studio-Saelix Sencho software (up to version 0.94.1 ) contains a vulnerability in the Login Endpoint (specifically affecting the /api/auth/login file). The root cause is that the login limiter relied on client-supplied X-Forwarded-For data without an explicit trusted-proxy boundary, allowing ...