CVE-2026-82815

Name of the Vulnerable Software and Affected Versions MegaEase EaseProbe versions prior to 2.3.1

Description A flaw in the Middleware component within the realIP() function of the web/server.go file allows for improper access controls. This issue occurs when the X-Forwarded-For, X-Real-IP, or True-Client-IP arguments are manipulated, enabling a remote attacker to bypass security restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict or validate the X-Forwarded-For, X-Real-IP, and True-Client-IP headers to prevent unauthorized access via the realIP() function.