Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.2%	CVE-2026-103592simple-router · Use of Less Trusted Source Medium6.9EPSS 0.2%2026-09-30CVE Database V5CVE-2026-103592 simple-php-router versions up to 5.4.1.7 have an IP restriction bypass vulnerability in the IpRestrictAccess middleware. This flaw allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections by spoofing certain HTTP headers such as X-Forwarded-For, CF-Connecting-IP, or Client-IP. Exploiting this vulnerability enables attackers to access IP-restricted routes that should otherwise be protected. EPSS 0.2%Vulnerability pecee	CVE Database V5	2026-09-30

Showing 1–1 of 1 result