Skip to content

CVE record · 1 source

CVE-2026-108736

CVSS 3.7

Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and…

Vendor: Prometheus
Product: Prometheus / Alertmanager
CVSS: 3.7
Exposure class: Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 22d ago

Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and…

Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus allowlists by spoofing X-Forwarded-For headers. Because…

CVSS 3.7 CVE-2026-108736 Prometheus