Skip to content
OpenAdvisories

Vendor

fatedier

3 known vulnerabilities.

Products

frp 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-110619

    frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints

    frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are registered on the root mux outside Basic Authentication. Attackers can query /debug/ppr…

    fatedier frp
  • Medium 6.5
    CVE-2026-40910

    frp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control

    frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorizat…

    fatedier frp github.com/fatedier/frp Go