CVE-2026-103592 | pecee simple-router up to 5.4.1.7 IpRestrictAccess X-Forwarded-For/CF-Connecting-IP/Client-IP incomplete blacklist

October 1, 2026 Yanac

A vulnerability labeled as critical has been found in pecee simple-router up to 5.4.1.7. This affects an unknown function of the component IpRestrictAccess. The manipulation of the argument X-Forwarded-For/CF-Connecting-IP/Client-IP results in incomplete blacklist.

This vulnerability is cataloged as CVE-2026-103592. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More