Skip to content
Threat Feed

Tag

Ip-Spoofing

1 brief RSS
high advisory

HestiaCP IP Spoofing Vulnerability (CVE-2026-43634)

HestiaCP versions 1.2.0 through 1.9.4 are vulnerable to IP spoofing (CVE-2026-43634), allowing unauthenticated remote attackers to bypass authentication security controls by manipulating the CF-Connecting-IP HTTP header to circumvent fail2ban, bypass IP allowlists, and poison authentication logs.

HestiaCP ip-spoofing authentication-bypass cve
2r 1t 1c