CVE-2026-110619 frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints. This medium-severity vulnerability allows unauthenticated remote attackers to access pprof debug endpoints, potentially providing valuable intelligence to attackers. Defenders should assess the security of their deployments and verify exposure to this vulnerability, especially in versions 0.41.0 through 0.71.1. The [truncated]
CVE-2026-73564 is a high-severity vulnerability in frp's optional SSH Tunnel Gateway. An unauthenticated peer can exploit this vulnerability to terminate the frps process and drop active tunnels with a single five-byte request when no authorized-keys file is configured. Defenders should prioritize updating to version 0.70.1 or later and configuring an authorized-keys file for SSH authentication. This vuln [truncated]
