CVE-2026-102161: Security Advisory 0190
Published Oct 6, 2026
·Updated
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.
Affected Software
1 affected component
CV-CUE
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2026.2.1Patch Security Advisory 0190
Event History
Oct 6, 2026
CVE Published
via MITRE·07:39 PM
Data Sourced
via MITRE·07:39 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness