Headroom Labs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Headroom | 2 | – | Aug 21, 2026 |
Exploited and recent CVEs
- CVE-2026-77776 Headroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity 0.6%
- CVE-2026-77775 Headroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation 0.6%