Mmastodon TechnologyCybersecurity first seen 7 h ago, last 7 h ago, peak #9

x-ui flaw exposes xray management interface, no patch yet

Original: CVE-2026-79316 x-ui 0.3.2 improper access control lets any panel user rebind the xray gRPC service to non-loopback, expo

A newly published vulnerability, CVE-2026-79316, affects x-ui 0.3.2. Improper access control lets any panel user rebind the xray gRPC service to a non-loopback address, exposing the management interface to outside access. The flaw carries a CVSS score of 7.6 and no patch is currently available. Users are advised to restrict panel access and monitor for updates.

Why now: A fresh CVE with a high severity score and no available patch is prompting users to secure their deployments.

x-uixrayCVE-2026-79316

Open on mastodon →

Evidence

• CVE-2026-79316 x-ui 0.3.2 improper access control lets any panel user rebind the xray gRPC service to non-loopback, exposing the management interface. CVSS 7.6, no patch yet. Restrict panel access and watch for updates. https://www. valtersit.com/cve/CVE-2026-793 16/ # CVE #… · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/1627860