CVE-2026-102161 — Security Advisory 0190
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their so…
Published: 2026-10-06 · CVSS: 8.7 · CVSS 4.0
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7