CVE-2025-10929Medium· 5.3▾ SunlitImproper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.
reverse_proxy_header < 1.1.2Upgrade past the affected range:
reverse_proxy_header 1.1.2Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116178High· 7.5vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inc…
CVE-2026-89317Medium· 6.3JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)
CVE-2026-98745Medium· 5.5kernel: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (CVE-2026-98745)
CVE-2026-98794Medium· 6.5kernel: ipvs: filter some flags received in the backup server (CVE-2026-98794)
CVE-2026-31709High· 8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to_cifs_acl() derive a DACL pointer from a server-supplied dacloffset …
CVE-2026-94200High· 8.2Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a denial of service of the ssl application …