CVE-2026-77463

The Remark42 self-hosted comment engine (versions 1.0.0 to 1.16.2 ) is vulnerable to a rate limit bypass due to the unconditional trust of True-Client-IP , X-Real-IP , and X-Forwarded-For headers. Because the software fails to verify that the direct peer is a trusted proxy, and the middleware.Rea...

CVE-2022-24112

CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei template: CVE-2022-24112.yaml The essence of this vulnerability is similar to CVE-2021-45232, both bypass authorization or are unauthenticated, to execute malicious filterfunc or script in a route to execute commands...

vaultwarden-ip-header-spoof

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vaultwarden-ip-header-spoof Write-up: https://abraxaslabs.tech/research/vaultwarden-ip-header-spoof vaultwarden-ip-header-spoof Vaultwarden 1.37.3 - dani-garcia Default IPHEADER=X-Real-IP plus...

CVE-2026-119711

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711 PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

EUVD-2026-114116

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711

PipesHub versions prior to 0.10.0 are vulnerable to a rate limit bypass due to a flaw in the getClientIp() function. Unauthenticated attackers can evade per-IP throttling by spoofing the X-Forwarded-For or X-Real-IP headers. By rotating these header values, an attacker can obtain fresh rate-limit...

CVE-2026-119711 PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

PT-2026-133645

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711: pipeshub-ai: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated…

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-118653

Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is unset, and the default RateLimiter uses that result as its client identifier. A remote attacker can rotate arbitrary forwarded-address valu...

CVE-2026-118651

Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream service when Echo.IPExtractor is not configured. A remote client can therefore make upstream services receive a spoofed client address,...

Echo: X-Real-IP Extractor Trusts The Header Value Instead Of The Sending Peer

Impact In Echo v5, "ExtractIPFromRealIPHeader" checked whether the address supplied in "X-Real-IP" belonged to a trusted range instead of checking the address of the direct network peer. An untrusted client could therefore supply a loopback or private address and have it returned by "c.RealIP" wi...

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP To Upstream By Default

Summary The Echo proxy middleware "middleware/proxy.go" preserves an incoming "X-Real-IP" header verbatim and forwards it to the upstream service when "EchoIPExtractor" is not configured — which is the default. Because any HTTP client can supply an arbitrary "X-Real-IP" value, an attacker can cau...

Linux Distros Unpatched Vulnerability : CVE-2026-118651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream servic...

Linux Distros Unpatched Vulnerability : CVE-2026-118265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-supplied X-Real-IP value belongs to a trust...

Linux Distros Unpatched Vulnerability : CVE-2026-118653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is...

Echo Has Rate Limiter Bypass Via Spoofed X-Forwarded-For Header In Default Configuration

Summary When "echo.New" is used without explicitly setting "EchoIPExtractor", the "RealIP" method falls back to reading the client-supplied "X-Forwarded-For" or "X-Real-IP" header without any proxy-origin validation. The default "RateLimiter" middleware derives its per-client identifier from...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.RealIP method in context.go. When EchoIPExtractor is unset, the default RateLimiter uses ctx.RealIP as its client identifier, and an attacker can evade throttling by...

Reliance on Untrusted Inputs in a Security Decision

Overview github.com/labstack/echo/v5/middleware is a middleware package for echo. Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.RealIP method in context.go. When EchoIPExtractor is unset, the default RateLimiter uses...