CVE-2026-86041

A flaw was found in ezBookkeeping. Due to missing trusted proxy configurations in the web router, the application inherently trusts client-supplied network headers. A remote attacker can exploit this flaw by sending a request with a spoofed X-Forwarded-For HTTP header containing an authorized IP...