If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews
← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 16, 2026 · 14:16via CVEFeed

CVE-2026-73058 - stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass

Brief

CVE ID : CVE-2026-73058

Published : Aug. 16, 2026, 2:16 p. m.

  • 6 hours, 50 minutes ago

Description : stoatchat versions before 0.

  • 0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.

Severity: 5.8

  • MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed→
Vulnerabilities & PatchesCVE-2026-73058