CVE-2026-118265 | Labstack Echo up to 5.4.0 IP Extraction ExtractIPFromRealIPHeader X-Real-IP improper authentication

October 28, 2026 Yanac

A vulnerability was found in Labstack Echo up to 5.4.0. It has been classified as problematic. This vulnerability affects the function ExtractIPFromRealIPHeader of the component IP Extraction. This manipulation of the argument X-Real-IP causes improper authentication.

This vulnerability is tracked as CVE-2026-118265. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More