CVE-2026-40575

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 17, 2026

Last Seen

October 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Authentication Bypass in OAuth2 Proxy Vulnerability Disclosed57.8

A vulnerability, CVE-2026-76835, has been identified in OAuth2 Proxy versions 7.15.2 to 7.15.4, allowing unauthenticated remote attackers to bypass authentication by manipulating the X-Forwarded-Uri header. The flaw, with a CVSS score of 9.1, arises when the --reverse-proxy is enabled and specific s...