Lucene search
+L

12721 matches found

NVD
NVD
•added 2026/09/25 9:17 p.m.•14 views

CVE-2026-100390

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...

9.1CVSS0.0029EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/25 9:07 p.m.•7 views

CVE-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 9:07 p.m.•36 views

CVE-2026-91768

The PHP FastCGI client contains an IPv6 access control bypass vulnerability (CVE-2026-91768 ). The issue stems from the IPv6 branch of the FastCGI client access check, which incorrectly compares only the first 12 bytes of a 16-byte IPv6 address. This causes listen.allowed_clients to match on a /9...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 9:07 p.m.•11 views

EUVD-2026-87350

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/25 9:07 p.m.•10 views

CVE-2026-91768

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/09/25 9:07 p.m.•9 views

CVE-2026-91768

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

6.5CVSS5.8AI score0.00561EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/25 9:07 p.m.•30 views

CVE-2026-91768 IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comparison (memcmp 12 bytes)

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and...

6.5CVSS0.00561EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:13 p.m.•18 views

CVE-2026-100390

Zoraxy versions 3.2.3 through 3.3.4 are vulnerable to client IP spoofing due to a failure to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. This allows unauthenticated attackers connecting over IPv6 to supply arbitrary X-Forwarded-For values. Consequently, a...

9.1CVSS5.9AI score0.0029EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/25 8:13 p.m.•9 views

EUVD-2026-87327

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...

9.1CVSS5.9AI score0.0029EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/25 8:13 p.m.•7 views

CVE-2026-100390 Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...

9.1CVSS5.9AI score
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2026/09/25 6:55 p.m.•14 views

Critical: Red Hat Security Advisory: kernel security update

An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

9.8CVSS6.9AI score0.00996EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2026/09/25 6:55 p.m.•11 views

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/25 3:07 p.m.•6 views

DirtyAH6

DirtyAH6 CVE-2026-80844 Writeup !WARNING El PoC se proporciona únicamente para ayudar a defensores, mantenedores y equipos de seguridad autorizados a validar parches, mitigaciones, detecciones y exposición en sistemas que poseen o que están explícitamente autorizados a probar. Usted es el único...

7.6AI score0.00434EPSS
SaveExploits2
OSV
OSV
•added 2026/09/25 11:35 a.m.•8 views

USN-8819-2 linux-aws, linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

9.8CVSS7AI score0.00514EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•10 views

AZL-104442 CVE-2026-98102 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6mcdel1src When removing a source filter whose count reaches zero, ip6mcdel1src unlinks psf from pmc-mcasources. If the filter was previously active, the code moved psf directly into...

5.8AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•6 views

AZL-104745 CVE-2026-98099 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb using direct pointer assignments instead of rcuassignpointer: 1. In...

5.8AI score0.0017EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•9 views

CVE-2026-98102

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6mcdel1src When removing a source filter whose count reaches zero, ip6mcdel1src unlinks psf from pmc-mcasources. If the filter was previously active, the code moved psf directly into...

0.00168EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•10 views

AZL-104636 CVE-2026-98101 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and RAW multicast receive paths. ip6mcsource mutated psl-sladdr and...

5.8AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•8 views

DEBIAN-CVE-2026-98102

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6mcdel1src When removing a source filter whose count reaches zero, ip6mcdel1src unlinks psf from pmc-mcasources. If the filter was previously active, the code moved psf directly into...

5.9AI score0.00168EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•8 views

DEBIAN-CVE-2026-98101

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and RAW multicast receive paths. ip6mcsource mutated psl-sladdr and...

5.9AI score0.00166EPSS
SaveExploits0References1
Rows per page
Query Builder