Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:zoraxy:zoraxy:3.2.3:*:*:*:*:*:*:*

1 brief RSS
high advisory

CVE-2026-100390 - IP Spoofing Vulnerability in Zoraxy

Zoraxy versions 3.2.3 through 3.3.4 contain a vulnerability in IPv6 address parsing that allows unauthenticated attackers to spoof the X-Forwarded-For header and bypass IP-based access controls.

Zoraxy vulnerability webserver network-security
1t 1c