Security Advisory

CVE-2026-82648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-30 14:33:31

Last updated 2026-09-02 16:00:31

Assigner VulnCheck

CVSS score 7.1

State PUBLISHED

Description

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.

← Browse all CVEs View on cve.org ↗