W1R3L355 on Telegram: “CVE-2026-91768: FastCGI allowed_clients compared…”

TGViewer Telegram Channel Viewer

W1R3L355 @v01dch4nn3l · 1.19K subscribers

Post #1338 297 Oct 13, 2026, 04:53 UTC

CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits · Alexandre Daubois
https://daubois.dev/blog/cve-2026-91768-php-fpm-ipv6-allowed-clients-bypass/

daubois.dev CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits php-fpm accepted FastCGI connections from any address sharing the first 96 bits of an allowed IPv6 address, because one memcmp asked for 12 bytes instead of 16.

💊 5
🥰 2

Open in Telegram All posts from @v01dch4nn3l

More from @v01dch4nn3l

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →