{"uuid": "996bc84d-0ec9-4cb8-9958-b2d663a9323e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100390", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwf55kpllb2q", "content": "CRITICAL: tobychui zoraxy 3.2.3 \u2013 3.3.4 has auth bypass (CVE-2026-100390) via IPv6 X-Forwarded-For spoofing. Restrict IPv6 or avoid IP-based controls until patched. https://radar.offseq.com/threat/cve-2026-100390-authentication-bypass-by-spoofing-in-tobychui-zoraxy-92a9e1620a0f6d01 #OffSeq #CVE20...", "creation_timestamp": "2026-09-26T01:30:28.461261Z"}