CVE record · 1 source
CVE-2026-108555
CVSS 4.2PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by…
- Vendor
- Cloudflare
- Product
- Cloudflare WARP / Workers / Zero Trust
- CVSS
- 4.2
- Exposure class
- Cloud platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by…
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public…