{"schema":"vulnpedia.research/1","cve":"CVE-2026-108736","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@haind03/speedtest-tracker-trust-proxies-allowlist-bypass","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://hackmd.io/@haind03/speedtest-tracker-trust-proxies-allowlist-bypass"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://hackmd.io/@haind03/speedtest-tracker-trust-proxies-allowlist-bypass"}]},{"url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/bootstrap/app.php#L23-L41","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/bootstrap/app.php#L23-L41"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/bootstrap/app.php#L23-L41"}]},{"url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/AllowedIpAddressesMiddleware.php#L16-L27","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/AllowedIpAddressesMiddleware.php#L16-L27"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/AllowedIpAddressesMiddleware.php#L16-L27"}]},{"url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/PrometheusAllowedIpMiddleware.php#L22-L42","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/PrometheusAllowedIpMiddleware.php#L22-L42"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://github.com/alexjustesen/speedtest-tracker/blob/fce6eb36181ed70b5b0763c391a50b806d7e3da7/app/Http/Middleware/PrometheusAllowedIpMiddleware.php#L22-L42"}]},{"url":"https://github.com/alexjustesen/speedtest-tracker","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://github.com/alexjustesen/speedtest-tracker"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://github.com/alexjustesen/speedtest-tracker"}]},{"url":"https://www.vulncheck.com/advisories/speedtest-tracker-through-1.15.0-ip-allowlist-bypass-via-x-forwarded-for-spoofing","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:42.324Z","url":"https://www.vulncheck.com/advisories/speedtest-tracker-through-1.15.0-ip-allowlist-bypass-via-x-forwarded-for-spoofing"},{"source":"nvd","sourceId":"CVE-2026-108736","modified":"2026-10-16T19:18:44.867","url":"https://www.vulncheck.com/advisories/speedtest-tracker-through-1.15.0-ip-allowlist-bypass-via-x-forwarded-for-spoofing"}]},{"source":"euvd","sourceId":"EUVD-2026-96902","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96902","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-96902","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96902"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}