Read the docs

code100x

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

code100x records in CISA KEV

No code100x vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-07812 CVE-2026-8890 · GHSA-qggg-4j5m-mx55

code100x Mobile API Authentication Bypass via Header Spoofing

Priority HIGH 77

code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload in the 'g' HTTP header.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0049 Published 2026-05-26 Fixed in 90b489ee7c63c301107d6374d4b3f2b8e4060fe5, 88c6c5e94e23da101235c4c7e9c7591ac1016549 CWE-639
Open these records in search →