CVE-2026-119285

A flaw was found in Fiber. When configured with wildcard subdomains and credentials enabled, the Cross-Origin Resource Sharing CORS middleware improperly validates domain origins by checking only the host suffix without enforcing a proper domain boundary. A remote attacker can exploit this issue ...