giuseppe99barchetta CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL giuseppe99barchetta CVE published 2026-10-20

CVE-2026-113703

CVE-2026-113703 is an authentication bypass vulnerability in SuggestArr before version 3.0.0. The vulnerability is due to the improper trust of client-controlled request.remote_addr value, which is derived from the spoofable X-Forwarded-For header. This allows attackers to send a request with X-Forwarded-For set to a trusted CIDR address, such as 127.0.0.1, to gain an unauthenticated admin session.