CVE-2026-77463 | umputun Remark42 up to 1.16.1 IP Handler middleware.RealIP True-Client-IP/X-Real-IP/X-Forwarded-For improper authentication

A vulnerability described as critical has been identified in umputun Remark42 up to 1.16.1. Affected by this issue is the function middleware.RealIP of the component IP Handler. Executing a manipulation of the argument True-Client-IP/X-Real-IP/X-Forwarded-For can lead to improper authentication.

The identification of this vulnerability is CVE-2026-77463. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More