Skip to content
Threat Feed
Subscribe

Product

Zoraxy (3.2.3 - 3.3.4)

1 brief RSS
high advisory

CVE-2026-100390 - IP Spoofing Vulnerability in Zoraxy

Zoraxy versions 3.2.3 through 3.3.4 contain a vulnerability in IPv6 address parsing that allows unauthenticated attackers to spoof the X-Forwarded-For header and bypass IP-based access controls.

Zoraxy vulnerability webserver network-security
1t 1c