TI-2026-41890 CVE-2026-58172 · GHSA-wc9q-87f2-4983
Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests
Priority HIGH 81
Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnerability that allows denied clients to circumvent IP-based access restrictions by sending WebSocket upgrade requests.