CVE-2026-102161

An unauthenticated attacker positioned on an adjacent private network —or an attacker routed through a reverse proxy/load balancer that forwards client headers—can forge their source IP address . This vulnerability allows the attacker to gain administrative session privileges on the CV-CUE backen...