Vulnerabilities

TI-2026-50096 CVE-2026-71485 · GHSA-9468-v6mj-fppw

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

MEDIUM 48

Centrifugo is an open-source scalable real-time messaging server.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00609 Published 2026-08-20 Fixed in 6.9.0 CWE-290

TI-2026-44987 CVE-2026-62963

MEDIUM 44

Centrifugo is an open-source scalable real-time messaging server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00524 Published 2026-07-16 Fixed in 6.8.4 CWE-409

TI-2026-36829 CVE-2026-49998 · GHSA-g6vg-wj8f-48cj

HIGH 71

Centrifugo is an open-source scalable real-time messaging server.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.0022 Published 2026-07-16 Fixed in 6.8.1 CWE-347

TI-2026-24830 CVE-2026-32301 · GHSA-j77h-rr39-c552

HIGH 79

Centrifugo is an open-source scalable real-time messaging server.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00293 Published 2026-03-12 Fixed in 6.7.0 CWE-918