https://vulnerability.circl.lu/sightings/feed 2026-09-21T17:09:49.846410+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a7de274c-8f2e-4cd2-913f-48f59bb14762/export 2026-09-21T17:09:49.871141+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a7de274c-8f2e-4cd2-913f-48f59bb14762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75975", "type": "seen", "source": "https://gist.github.com/alon710/4dc17918da62d2577fc435c04c7ff596", "content": "# CVE-2026-75975: CVE-2026-75975: Server-Side Request Forgery (SSRF) and Address-Policy Bypass via Malformed IPv6 Parser in fast-uri\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75975\n\n## Summary\nA critical parser differential vulnerability in the Node.js fast-uri library allows unauthenticated remote attackers to bypass address-validation filters and perform Server-Side Request Forgery (SSRF). The library fails to validate complete IPv6 grammar inside bracketed literals, silently truncating invalid trailing characters and normalising malformed hosts into valid loopback or private addresses.\n\n## TL;DR\nThe fast-uri library's IPv6 parser silently normalises invalid IP literals like [::not-valid] to [::] (the unspecified loopback address). Attackers exploit this parser differential to bypass security blocklists, redirecting outbound HTTP requests to internal networks or local services.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20, CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **Exploit Maturity**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Integrity (High), Server-Side Request Forgery (SSRF)\n\n## Affected Systems\n\n- fast-uri (v2.3.1 - v2.4.4)\n- fast-uri (v3.0.0 - v3.1.5)\n- fast-uri (v4.0.0 - v4.1.2)\n- **fast-uri**: >= 2.3.1, < 2.4.5 (Fixed in: `2.4.5`)\n- **fast-uri**: >= 3.0.0, < 3.1.6 (Fixed in: `3.1.6`)\n- **fast-uri**: >= 4.0.0, < 4.1.3 (Fixed in: `4.1.3`)\n\n## Mitigation\n\n- Upgrade the fast-uri dependency to patched versions: 2.4.5, 3.1.6, or 4.1.3.\n- Implement regex validation on the input URL to reject any bracketed hosts containing non-hexadecimal or non-colon characters.\n- Utilize package resolution overrides to force transitive dependencies to use the fixed versions.\n\n**Remediation Steps:**\n1. Step 1: Check your package lockfile for references to fast-uri.\n2. Step 2: Run 'npm install fast-uri@latest' or force the dependency update in package.json using overrides.\n3. Step 3: Ensure that any parsing logic verifies the '.error' field of the output returned by the parse function.\n4. Step 4: Redeploy the application and monitor egress HTTP requests for loopback resolution patterns.\n\n## References\n\n- [NVD - CVE-2026-75975](https://nvd.nist.gov/vuln/detail/CVE-2026-75975)\n- [GHSA-f65p-4m7j-42xc](https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc)\n- [OpenJS Foundation Advisories](https://cna.openjsf.org/security-advisories.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75975) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T17:33:14.496875Z"} 2026-09-02T17:33:14.496875+00:00 https://vulnerability.circl.lu/sighting/4bce7148-603e-4a7a-b665-34bb934b0f43/export 2026-09-21T17:09:49.873252+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4bce7148-603e-4a7a-b665-34bb934b0f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ekxwks5uch6se", "content": "CVE-2026-75977 - Mang Board WP\nCVE ID : CVE-2026-75977\n \n Published : Aug. 26, 2026, 7:42 a.m. | 26\u00a0minutes ago\n \n Description : The Mang Board WP plugin for WordPress is vulnerable to Missing Authorization via Authentication Cookie Forgery in all versions up to, and including...", "creation_timestamp": "2026-08-26T08:35:00.715312Z"} 2026-08-26T08:35:00.715312+00:00 https://vulnerability.circl.lu/sighting/1bae60df-558e-4d8b-ac94-78da2188d2c1/export 2026-09-21T17:09:49.873413+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1bae60df-558e-4d8b-ac94-78da2188d2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75975", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mtt2ghwjcc2b", "content": "\ud83d\udea8 High-severity security fix in fast-uri 2.4.5, 3.1.6, and 4.1.3 just released!\n\nPatches CVE-2026-75975. Server-side request forgery via malformed IPv6 normalization.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-24T10:03:28.237678Z"} 2026-08-24T10:03:28.237678+00:00 https://vulnerability.circl.lu/sighting/731cab36-97f6-4841-977b-2114fce4314a/export 2026-09-21T17:09:49.873543+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "731cab36-97f6-4841-977b-2114fce4314a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75976", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxuhebff24", "content": "Daily IT Security Digest \u2014 2026-08-19\n[Source](https://radar.offseq.com/threat/cve-2026-75976)\n\n### 8. Metabase SQL Injection Zero-Day \u2014 Unauthenticated Admin Access\nMetabase faces a critical SQL injection zero-day that grants unauthenticated attackers full admin access, database credential theft,", "creation_timestamp": "2026-08-19T05:13:00.783230Z"} 2026-08-19T05:13:00.783230+00:00 https://vulnerability.circl.lu/sighting/90e4f038-27ed-44f7-8bba-4cf4ae8119cf/export 2026-09-21T17:09:49.873678+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "90e4f038-27ed-44f7-8bba-4cf4ae8119cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75976", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtfxugtsy52t", "content": "Daily IT Security Digest \u2014 2026-08-19\n[Source](https://www.bleepingcomputer.com/news/security/philips-and-ge-investigating-clop-ransomware-data-theft-claims)\n\n### 7. Trendnet & Comfast Hardware Buffer Overflows \u2014 CVSS 9-10\nTwo critical network-device flaws have public exploits: **CVE-2026-75976** on", "creation_timestamp": "2026-08-19T05:12:57.516294Z"} 2026-08-19T05:12:57.516294+00:00 https://vulnerability.circl.lu/sighting/37f569d1-8f2a-43da-a072-fb5240bcf8ec/export 2026-09-21T17:09:49.873795+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37f569d1-8f2a-43da-a072-fb5240bcf8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75976", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfqi2zqwy2m", "content": "\ud83d\udd34 CVE-2026-75976 - Critical (9.9)\n\nA weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75976/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T03:00:47.172262Z"} 2026-08-19T03:00:47.172262+00:00 https://vulnerability.circl.lu/sighting/2afc548b-1a63-424d-b1d0-2910ac419a98/export 2026-09-21T17:09:49.873909+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2afc548b-1a63-424d-b1d0-2910ac419a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75979", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7hdxih4gydzjn", "content": "CVE-2026-75979 - xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine\nCVE ID : CVE-2026-75979\n \n Published : Aug. 19, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : A vulnerability was found in xianrendzw Easy...", "creation_timestamp": "2026-08-19T02:00:59.172376Z"} 2026-08-19T02:00:59.172376+00:00 https://vulnerability.circl.lu/sighting/c12c66d4-a9e2-4155-89b5-d473d1966c7c/export 2026-09-21T17:09:49.874026+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c12c66d4-a9e2-4155-89b5-d473d1966c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75976", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4qt5fiz572s4z", "content": "CVE-2026-75976 - TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow\nCVE ID : CVE-2026-75976\n \n Published : Aug. 19, 2026, 12:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function s...", "creation_timestamp": "2026-08-19T01:52:58.997244Z"} 2026-08-19T01:52:58.997244+00:00 https://vulnerability.circl.lu/sighting/c8cb9dbc-aeeb-4457-905a-a3f956977ffb/export 2026-09-21T17:09:49.874137+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c8cb9dbc-aeeb-4457-905a-a3f956977ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75978", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ikv6pfwwzcm7p", "content": "CVE-2026-75978 - xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission\nCVE ID : CVE-2026-75978\n \n Published : Aug. 19, 2026, 12:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in xianrend...", "creation_timestamp": "2026-08-19T01:46:58.847431Z"} 2026-08-19T01:46:58.847431+00:00 https://vulnerability.circl.lu/sighting/7e25720c-901c-4f54-b4ef-fa69768c4085/export 2026-09-21T17:09:49.874245+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7e25720c-901c-4f54-b4ef-fa69768c4085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75976", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117119230729166510", "content": "Stack-based buffer overflow (CVE-2026-75976, CVSS 9.4) in TRENDnet TEW-823DRU 1.1.02b01: remote exploitation possible via /cgi-bin/wan.cgi. Public exploit exists. Assess exposure & monitor for patches: https://radar.offseq.com/threat/cve-2026-75976-stack-based-buffer-overflow-in-trendnet-tew-823dru-3e76dd1e5f15fcab #OffSeq #Vulnerability #Infosec #IoTSecurity", "creation_timestamp": "2026-08-19T00:00:42.250008Z"} 2026-08-19T00:00:42.250008+00:00