Skip to content
OpenAdvisories

Vendor

alexjustesen

1 known vulnerabilities.

Products

speedtest-tracker 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-108736

    Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoofing

    Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus allowlists by spoofing X-Forwarded-For headers. Because bootstrap/app.php trusts every peer as a pr…

    alexjustesen speedtest-tracker