Spoofable forwarded client-IP headers vulnerability in Regular Labs products

CVE-2026-64875

What is CVE-2026-64875?

A vulnerability has been identified in Regular Labs products where GeoIP lookups are compromised by trusting spoofable forwarded client-IP headers. This flaw may allow malicious actors to bypass GeoIP rules, potentially exposing sensitive content or functionality based on geographic location. It is crucial for users of these products to be aware of this issue and implement appropriate security measures to mitigate the risk.

References