Remnawave Backend
Approved changes feed: RSS · Atom
cpe:2.3:a:remnawave:remnawave_backend:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Remnawave (bbc14bfd-ceaf-59c9-9104-a5bba4bd0239) |
|---|---|
| Product | Remnawave Backend (2d515a02-acc2-55e2-b7cf-893f57842840) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/remnawave/backend |
purl2cpe | 2026-07-28 16:41:17.163118 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39880 |
vulnerable | 2026-06-08 08:01:17.169089 |
Remnawave Backend has a race condition in HWID device limit allows bypassing max devices
MEDIUM (5)
Remnawave Backend is the backend for the Remnawave proxy and user management solution. Prior to 2.7.5, a glitch in the HWID device registration logic allows an authenticated user to bypass the configured limit for HWID devices and register more devices than expected, allowing them to resell subscriptions and consume excessive traffic. This vulnerability is fixed in 2.7.5.
Published: 2026-04-08T20:01:21.673Z
Updated: 2026-04-10T20:48:07.233Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.