CVE-2026-58488 | HedgeDoc up to 1.10.x Login/Registration cf-connecting-ip improper authentication

July 14, 2026 Yanac

A vulnerability classified as critical was found in HedgeDoc up to 1.10.x. This affects an unknown part of the component Login/Registration. Such manipulation of the argument cf-connecting-ip leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-58488. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More