{"uuid": "a1b5c14a-4411-4219-b457-dd1343678a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-100390", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117334751644153923", "content": "CRITICAL vuln: CVE-2026-100390 in tobychui zoraxy (3.2.3 \u2013 3.3.4). IPv6 parsing flaw lets attackers bypass IP-based controls via spoofed X-Forwarded-For headers. Restrict IPv6 or XFF reliance until patch. https://radar.offseq.com/threat/cve-2026-100390-authentication-bypass-by-spoofing-in-tobychui-zoraxy-92a9e1620a0f6d01 #OffSeq #CVE2026100390 #infosec", "creation_timestamp": "2026-09-26T01:30:25.870139Z"}