CVE-2026-82815
Received Received - Intake

HTTP Header Manipulation in EaseProbe

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulDB

Description
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-31
Last Modified
2026-08-31
Generated
2026-08-31
AI Q&A
2026-08-31
EPSS Evaluated
N/A
NVD
CVE-2026-82815
EUVD
EUVD-2026-68682

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
megaease easeprobe to 2.3.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82815 is an IP spoofing vulnerability in MegaEase EaseProbe up to version 2.3.0. It affects the realIP function in web/server.go, which processes HTTP headers like X-Forwarded-For without validating the request's origin. Attackers can manipulate these headers to forge their IP address, bypassing access controls and contaminating logs.

Detection Guidance

Check if your easeprobe instance is using versions 2.3.0 or earlier by inspecting the installed version. Monitor HTTP headers for unusual or forged X-Forwarded-For, X-Real-IP, or True-Client-IP values in server logs. Use tools like curl to send test requests with manipulated headers and verify if the server logs reflect the spoofed IP.

Impact Analysis

This flaw allows remote attackers to spoof their IP address, bypass IP-based access controls, evade rate limits, and falsify audit logs. Systems relying on these headers for security or logging may be tricked into accepting malicious requests as legitimate.

Compliance Impact

This vulnerability could undermine compliance by allowing unauthorized access or actions to go undetected due to falsified IP addresses in logs. GDPR requires accurate logging for accountability, while HIPAA mandates audit controls; spoofed IPs may invalidate these requirements.

Mitigation Strategies

Upgrade to github.com/go-chi/chi/v5 version 5.3.0 or later to enable TrustedProxyCIDRs validation. Alternatively, remove the middleware.RealIP usage if no reverse proxy is deployed. Ensure no untrusted clients can access the server directly to prevent header manipulation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82815. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart