Skip to content
OpenAdvisories

Vendor

code100x

1 known vulnerabilities.

Products

code100x 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-8890

    code100x Mobile API Authentication Bypass via Header Spoofing

    code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload in the 'g' HTTP header. The middleware in middleware.ts skips identity header g…

    code100x code100x