CVE-2026-107147 | alexandregz twofactor_gauthenticator Client-IP/X-Forwarded-For dns rebinding (ID 4640889)

October 27, 2026 Yanac

A vulnerability identified as critical has been detected in alexandregz twofactor_gauthenticator. Affected is an unknown function. Performing a manipulation of the argument Client-IP/X-Forwarded-For results in reliance on reverse dns resolution.

This vulnerability is reported as CVE-2026-107147. The attack is possible to be carried out remotely. No exploit exists.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More