CVE-2026-84186

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

CVE-2026-84186

This vulnerability affects PrestaShop and resides in the Tools::getRemoteAddr() function. When the application runs behind a reverse proxy, load balancer, or CDN, it incorrectly trusts the client-supplied X-Forwarded-For header instead of the IP provided by the trusted infrastructure, allowing an...

CVE-2026-84186 Incorrect access control in PrestaShop

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

EUVD-2026-72305

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

CVE-2026-84186 Incorrect access control in PrestaShop

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

VulnCheck KEV: CVE-2026-60105

Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP function, which fails to detect embedded IPv4 addresses within IPv4-mapped IPv6 addresses. An unauthenticated attacker can obta...

PT-2026-86857

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

PT-2026-95039

TuxCare rebuilt ip-address to address 2 CVEs. Fixed in 6.4.0-tuxcare.2...

PT-2026-86656

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

PT-2026-86915

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-86287: Improper Validation of Specified Type of Input

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-84186: Authentication Bypass by Spoofing

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

LOYTEC L-IP BACnet/IP Routers Improper Authentication (CVE-2026-12504)

The PAM configuration of a LOYTEC L-IP BACnet/IP router uses the 'pamunix.so nullok' option, which permits authentication against any local account that has an empty password field in '/etc/passwd'. A local attacker can leverage an account left without a password to authenticate as uid=0 and obta...

LOYTEC L-IP BACnet/IP Routers Stack-based Buffer Overflow (CVE-2026-55728)

The 'cmdipaddrconflict' subcommand of the SUID-root '/usr/bin/ltsudo' utility on a LOYTEC L-IP BACnet/IP router copies a user-supplied network interface name into a fixed 20-byte stack buffer using 'strcpy' without bounds checking. A 'superadmin'-group attacker can supply an overly long interface...

LOYTEC L-IP BACnet/IP Routers Out-of-bounds Read (CVE-2026-55732)

The BACnet packet parser of a LOYTEC L-IP BACnet/IP router reads out of bounds of the internal 'bacdtdaystillmonth' lookup table in 'bacdtdatetimetotod' when it processes a malformed BACnet TimeSynchronization or UTC-TimeSynchronization packet carrying an invalid month value. An unauthenticated...

CVE-2026-86485: Reliance on IP Address for Authentication

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks...

LOYTEC L-IP BACnet/IP Routers Cross-site Scripting (CVE-2026-12496)

An unauthenticated remote attacker can inject and store malicious JavaScript in the OPC XML-DA server statistics page /webui/statistics/opcsrv of a LOYTEC L-IP BACnet/IP router by sending a crafted 'User-Agent' header in a POST request to the device's '/da' endpoint. The script executes in an...

LOYTEC L-IP BACnet/IP Routers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2015-7906)

LOYTEC L-IP BACnet/IP router devices allow a remote, unauthenticated attacker to download a device backup file that exposes the hash of the device's user passwords. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

LOYTEC L-IP BACnet/IP Routers Improper Privilege Management (CVE-2026-12502)

A local attacker who is a member of the 'superadmin' group can reset the password of any LARM user on a LOYTEC L-IP BACnet/IP router, including the 'larmapp' service account, via the 'set-passwd' subcommand of the '/usr/bin/ltsudo' utility. This bypasses the authorization checks that should limit...

LOYTEC L-IP BACnet/IP Routers Unchecked Input for Loop Condition (CVE-2026-55731)

The SNMP agent of a LOYTEC L-IP BACnet/IP router does not bound the loop condition it derives from an SNMP GETNEXT request's OID. An unauthenticated remote attacker can send a crafted GETNEXT request containing an oversized OID component to drive the agent into a long-running loop, exhausting CPU...