CVE-2026-43505

Name of the Vulnerable Software and Affected Versions Prosody versions prior to 0.12.6 Prosody versions 1.0.0 through 13.0.4

Description When the mod proxy65 module is enabled, a flaw in how access control is handled during the activation scenario allows for the relaying of unauthenticated traffic.

Recommendations Update to version 0.12.6 or later. Update to version 13.0.5 or later. As a temporary workaround, disable the mod proxy65 module to minimize the risk of exploitation.