CVE-2026-102161
HighCVSS 8.8Summary
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.
Risk Assessment
An attacker can gain administrative privileges without authentication, risking full compromise of the CV-CUE backend and managed resources.
Recommendation
Restrict access to the CV-CUE backend to trusted networks, verify reverse proxy/load balancer client header handling, and apply the vendor patch.
Other vulnerabilities in CV-CUE
Original NVD description (English source)
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS