CVE-2026-13342

Name of the Vulnerable Software and Affected Versions Security Optimizer versions 1.5.8 through 1.6.4

Description An IP allowlist bypass exists in the optional IP-based login restriction feature. The software fails to correctly validate requests, allowing unauthenticated users from non-allowlisted IP addresses to access and use the login form, which bypasses the administrator's configured access controls.

Recommendations Update Security Optimizer to a version later than 1.6.4. As a temporary mitigation, disable the IP-based login restriction feature.