search
xray
Trends
- 1Xray-core kept quiet about certificate verification flaw●Xray-core concealed a certificate verification bypass vulnerability
Xray-core, a widely used proxy tool, is accused of quietly fixing a certificate verification bypass vulnerability without disclosing it to users, according to a discussion on the net4people forum. Critics argue the project concealed the security issue instead of publishing an advisory, leaving users of the popular anti-censorship software unaware they may have been exposed.
- 2x-ui flaw exposes xray management interface, no patch yet●CVE-2026-79316 x-ui 0.3.2 improper access control lets any panel user rebind the xray gRPC service to non-loopback, expo
A newly published vulnerability, CVE-2026-79316, affects x-ui 0.3.2. Improper access control lets any panel user rebind the xray gRPC service to a non-loopback address, exposing the management interface to outside access. The flaw carries a CVSS score of 7.6 and no patch is currently available. Users are advised to restrict panel access and monitor for updates.
Repos
- net4people/bbs Forum for discussing Internet censorship circumvention