Improper Input Validation in GAO Electronic Protest Docketing System and EDS

CVE-2026-54106

What is CVE-2026-54106?

The GAO Electronic Protest Docketing System and CBCA Electronic Docketing System suffer from insufficient validation of X-Forwarded-For HTTP headers. This vulnerability allows remote attackers with compromised administrative credentials to effectively bypass network access controls, enabling unauthorized access. As a result, sensitive data could be at risk, highlighting the necessity for robust validation mechanisms to enhance security in these systems.

References