{"vulnerability": "CVE-2026-111663", "sightings": [{"uuid": "72561694-9e95-47e0-9083-ab1917bf2905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111663", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117452002336890954", "content": "CVE-2026-111663 Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints, through POST /graphql and retrieve the full response via the returned ActiveStorage blob URL.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111663https://hackmd.io/@hieuPenguinnn/chaskiq-unauthenticated-ssrf-oembed-url-uploadhttps://github.com/chaskiq/chaskiq/blob/2.0.3/app/graphql/mutations/create_url_upload.rb#L29-L66https://github.com/chaskiq/chaskiq/blob/2.0.3/app/controllers/graphql_controller.rb#L3-L33https://www.vulncheck.com/advisories/chaskiq-through-2.0.3-ssrf-via-createurlupload-graphql-mutation#chaskiq#CVE_2026_111663#bot", "creation_timestamp": "2026-10-16T18:28:49.199034Z"}, {"uuid": "119f3fb4-3bb9-40e8-b876-d26abe4331fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzexuyzqy2w", "content": "\ud83d\udea8 CVE-2026-111663 \u2014 CVSS 9.2 CRITICAL\n\nChaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated atta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-16T20:08:52.939342Z"}, {"uuid": "50b8db53-cf68-4cec-9f48-1548bbce7439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzgpplfeh2n", "content": "CVE-2026-111663 - chaskiq\nThe Chaskiq service (up to version 2.0.3) lets anyone send a special request that makes the server fetch any web address, even hidden internal ones like cloud metadata pages. The server then\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chaskiq #CVE #infosec", "creation_timestamp": "2026-10-16T20:40:06.604229Z"}, {"uuid": "8cf87c17-83a4-4612-8fa8-4e782b877c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-111663", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117455429686216788", "content": "CRITICAL SSRF in Chaskiq <=2.0.3 (CVE-2026-111663): Unauthenticated attackers can fetch internal/cloud URLs via GraphQL, risking sensitive data exposure. Restrict /graphql access & monitor POSTs. CVSS 8.6. https://radar.offseq.com/threat/chaskiq-through-203-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-cc1602d36198eead #OffSeq #SSRF #Chaskiq #Vuln", "creation_timestamp": "2026-10-17T09:00:26.717358Z"}]}