AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-54106

MEDIUM · CVSS 4.7 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-18 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.7. It affects Office. It may be remotely exploitable.

CVE
CVE-2026-54106
Severity
MEDIUM
CVSS
4.7
EPSS
0.49%
Office

Original NVD Description

The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) do not validate X-Forwarded-For HTTP headers, allowing a remote attacker with compromised administrator credentials to bypass network access controls and log in.