CVE-2026-63439 | Bubka 2FAuth up to 7.x Reverse Proxy Guard ReverseProxyGuard::user REMOTE_USER/AUTH_PROXY_HEADER_FOR_USER improper authentication

November 6, 2026 Yanac

A vulnerability was found in Bubka 2FAuth up to 7.x and classified as critical. This issue affects the function ReverseProxyGuard::user of the component Reverse Proxy Guard. Such manipulation of the argument REMOTE_USER/AUTH_PROXY_HEADER_FOR_USER leads to improper authentication.

This vulnerability is listed as CVE-2026-63439. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More