CVE-2026-111934 | Coder up to 2.34.6 ExtractRealIPAddress X-Forwarded-For input validation

October 17, 2026 Yanac

A vulnerability labeled as problematic has been found in Coder up to 2.34.6. This issue affects the function ExtractRealIPAddress. Such manipulation of the argument X-Forwarded-For leads to improper input validation.

This vulnerability is traded as CVE-2026-111934. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More