CVE-2026-110726 | Eclipse Connected Services Platform up to 1.7.3 Api Gateway ClientIpKeyResolver X-Forwarded-For authentication bypass

October 15, 2026 Yanac

A vulnerability classified as critical was found in Eclipse Connected Services Platform up to 1.7.3. This impacts the function ClientIpKeyResolver of the component Api Gateway. Executing a manipulation of the argument X-Forwarded-For can lead to authentication bypass using alternate channel.

This vulnerability is handled as CVE-2026-110726. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More