Skip to content
Threat Feed

Product

Sre

1 brief RSS
high advisory

SmythOS sre Authentication Bypass Vulnerability (CVE-2026-7022)

A remote improper authentication vulnerability exists in SmythOS sre up to version 0.0.15, allowing attackers to bypass authentication by manipulating the X-DEBUG-RUN/X-DEBUG-INJ arguments in the HTTP Header Handler component.

sre authentication-bypass CVE-2026-7022
2r 1t 1c