CVE-2022-24112

CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei template: CVE-2022-24112.yaml The essence of this vulnerability is similar to CVE-2021-45232, both bypass authorization or are unauthenticated, to execute malicious filterfunc or script in a route to execute commands...

vaultwarden-ip-header-spoof

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vaultwarden-ip-header-spoof Write-up: https://abraxaslabs.tech/research/vaultwarden-ip-header-spoof vaultwarden-ip-header-spoof Vaultwarden 1.37.3 - dani-garcia Default IPHEADER=X-Real-IP plus...

CVE-2026-119711

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711 PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

EUVD-2026-114116

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711 PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711

PipesHub versions prior to 0.10.0 are vulnerable to a rate limit bypass due to a flaw in the getClientIp() function. Unauthenticated attackers can evade per-IP throttling by spoofing the X-Forwarded-For or X-Real-IP headers. By rotating these header values, an attacker can obtain fresh rate-limit...

PT-2026-133645

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-119711: pipeshub-ai: PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated…

PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit buckets on authentication endpoints,...

CVE-2026-118653

Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is unset, and the default RateLimiter uses that result as its client identifier. A remote attacker can rotate arbitrary forwarded-address valu...

CVE-2026-118651

Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream service when Echo.IPExtractor is not configured. A remote client can therefore make upstream services receive a spoofed client address,...

Echo: X-Real-IP Extractor Trusts The Header Value Instead Of The Sending Peer

Impact In Echo v5, "ExtractIPFromRealIPHeader" checked whether the address supplied in "X-Real-IP" belonged to a trusted range instead of checking the address of the direct network peer. An untrusted client could therefore supply a loopback or private address and have it returned by "c.RealIP" wi...

Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP To Upstream By Default

Summary The Echo proxy middleware "middleware/proxy.go" preserves an incoming "X-Real-IP" header verbatim and forwards it to the upstream service when "EchoIPExtractor" is not configured — which is the default. Because any HTTP client can supply an arbitrary "X-Real-IP" value, an attacker can cau...

UBUNTU-CVE-2026-118651

Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream service when Echo.IPExtractor is not configured. A remote client can therefore make upstream services receive a spoofed client address,...

UBUNTU-CVE-2026-118653

Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is unset, and the default RateLimiter uses that result as its client identifier. A remote attacker can rotate arbitrary forwarded-address valu...

Linux Distros Unpatched Vulnerability : CVE-2026-118651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-supplied X-Real-IP header and forward it to an upstream servic...

UBUNTU-CVE-2026-118265

Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-supplied X-Real-IP value belongs to a trusted range instead of validating the direct network peer. A client reaching Echo directly, or through a proxy that preserves the header, ca...

Linux Distros Unpatched Vulnerability : CVE-2026-118653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-Forwarded-For or X-Real-IP values when Echo.IPExtractor is...

Linux Distros Unpatched Vulnerability : CVE-2026-118265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 5.0.0 until 5.4.1, Echo v5's ExtractIPFromRealIPHeader validates whether the client-supplied X-Real-IP value belongs to a trust...

Echo Has Rate Limiter Bypass Via Spoofed X-Forwarded-For Header In Default Configuration

Summary When "echo.New" is used without explicitly setting "EchoIPExtractor", the "RealIP" method falls back to reading the client-supplied "X-Forwarded-For" or "X-Real-IP" header without any proxy-origin validation. The default "RateLimiter" middleware derives its per-client identifier from...