GHSA-m4hm-2935-8pgpHighCVSS 8.8

An unauthenticated attacker located on an adjacent private network (or any attacker routed...

Published
October 6, 2026
Last Modified
October 6, 2026

🔗 CVE IDs covered (1)

📋 Description

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.

🔗 References (3)