Beveiligingsadvies

CVE-2026-82648

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-30 14:33:31

Laatst bijgewerkt 2026-09-02 16:00:31

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.

← Alle CVE's bekijken Bekijk op cve.org ↗