Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: code100x Clear all filters
TI-2026-07812 CVE-2026-8890 · GHSA-qggg-4j5m-mx55

code100x Mobile API Authentication Bypass via Header Spoofing

Priority HIGH 77

code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted JSON payload in the 'g' HTTP header.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0049 Published 2026-05-26 Fixed in 90b489ee7c63c301107d6374d4b3f2b8e4060fe5, 88c6c5e94e23da101235c4c7e9c7591ac1016549 CWE-639