{"vulnerability": "CVE-2026-7991", "sightings": [{"uuid": "810b59b0-f668-475d-9cf5-05124b0d188e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7991", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260507", "content": "", "creation_timestamp": "2026-05-06T18:00:00.000000Z"}, {"uuid": "43fbc631-7a79-49bf-9127-25bdcecaed5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7991", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260508", "content": "", "creation_timestamp": "2026-05-07T18:00:00.000000Z"}, {"uuid": "f7ab4cee-90a3-4c87-a04a-bdc6846a84e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79911", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzppmknq27", "content": "\ud83d\udd34 CVE-2026-79911 - Critical (10)\n\nA security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79911/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T00:01:23.143920Z"}, {"uuid": "4607e92f-b8d1-4c73-ad4d-5641ad3b1c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79912", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzpwfn6i2r", "content": "\ud83d\udfe0 CVE-2026-79912 - High (8.3)\n\nA vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79912/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T00:01:30.815346Z"}, {"uuid": "6b718ad3-8815-4525-8c1c-dce0472bac5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79911", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtx23h7slr2p", "content": "\ud83d\udea8 CVE-2026-79911 \u2014 CVSS 9.3 CRITICAL\n\nA security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79911\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T00:07:55.677077Z"}, {"uuid": "2f03ad6c-b3a5-43b9-9b20-5012e4911969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79912", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtx6g2uyyj2r", "content": "A Router Bug and the Usual Corporate Funeral Parade\nPANIC 64% | Lag 0.0h | CVE-2026-79912 is a high-severity vulnerability in TOTOLINK N600R firmware 4.3.0cu.7647_B20210106. I\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-26T01:25:26.755979Z"}, {"uuid": "c74ff2ff-44fd-4b56-97a6-a0d4d50f06d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79911", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx7s4gwe42u", "content": "CVE-2026-79911 - n600r\nThe router\u2019s web interface has a flaw that lets an attacker send a specially crafted hostname and cause the system to overflow its memory. This can be triggered from anywhere on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#n600r #totolink #CVE #infosec", "creation_timestamp": "2026-08-26T01:50:04.913395Z"}, {"uuid": "0451eb90-0356-4a2f-9fea-4f0e633038b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79916", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw2nc63aoz2j", "content": "CVE-2026-79916 - maxkb\nIn MaxKB versions before 2.10.5\u2011lts, a signed\u2011in workspace user can place special characters into the fields used for AWS Bedrock credentials. These characters are written directly to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxkb #1paneldev #CVE #infosec", "creation_timestamp": "2026-09-21T21:20:04.586597Z"}, {"uuid": "f38ffe8d-00b2-484f-ac6e-db3ef5028a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mw2prspa6w2z", "content": "\ud83d\udd34 CVE-2026-79916 - Critical (9.1)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79916/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-21T22:04:37.869778Z"}, {"uuid": "6926f3bb-8e14-45e7-a37a-349b393f73d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79916", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw2pxbejpr2g", "content": "\ud83d\udea8 CVE-2026-79916 \u2014 CVSS 9.1 CRITICAL\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.10.5-lts, authenticated workspace members c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79916\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T22:07:40.153791Z"}, {"uuid": "6d73e16c-bd22-47b4-aac3-cdca3dd1363e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-79913", "type": "published-proof-of-concept", "source": "https://github.com/cloudreve/cloudreve/security/advisories/GHSA-jvh5-97xg-v99f", "content": "", "creation_timestamp": "2026-09-22T22:35:08.258602Z"}, {"uuid": "5683fbbf-1836-4ec0-b9f3-786292d01b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79913", "type": "seen", "source": "https://gist.github.com/alon710/57edfd5f29828b39c794e053b9ab7b82", "content": "# CVE-2026-79913: CVE-2026-79913: Server-Side Request Forgery Bypass via IPv6 Transition Addresses in Cloudreve\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-09-22\n> **Full Report:** https://cvereports.com/reports/CVE-2026-79913\n\n## Summary\nCloudreve versions prior to 4.18.0 contain a Server-Side Request Forgery (SSRF) vulnerability. The application's validation logic fails to canonicalize various IPv4-in-IPv6 transition formats, such as NAT64, 6to4, and Teredo addresses. Consequently, an authenticated user with remote-download permissions can issue requests that bypass SSRF network boundaries, enabling connection routing to loopback, private, or cloud metadata endpoints.\n\n## TL;DR\nA validation logical flaw in Cloudreve allowed attackers to bypass SSRF defenses. By wrapping forbidden private IPv4 targets in IPv6 transition blocks, the application verified them as safe public IPs, while the underlying OS routed them to private internal endpoints.\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 6.5\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n- **Attack Complexity**: Low\n\n## Affected Systems\n\n- Cloudreve Community Edition\n- **Cloudreve**: < 4.18.0 (Fixed in: `4.18.0`)\n\n## Mitigation\n\n- Upgrade Cloudreve to version 4.18.0 or later to patch the core validation flaw.\n- Apply egress firewall filters to drop outbound IPv6 traffic destined for NAT64, 6to4, or Teredo blocks.\n- Enforce IMDSv2 with a session hop limit of 1 on cloud infrastructure hosting the application.\n\n**Remediation Steps:**\n1. Identify the current active version of Cloudreve by checking the admin console or application container.\n2. Download the 4.18.0 release binary or update the Docker image tag to 4.18.0.\n3. Restart the Cloudreve service to load the updated executable and run automated checks to verify functionality.\n4. Review user group permissions and restrict remote download permissions to highly trusted accounts.\n\n## References\n\n- [Cloudreve Security Advisory](https://github.com/cloudreve/cloudreve/security/advisories/GHSA-jvh5-97xg-v99f)\n- [Fix Commit 1c5cad6](https://github.com/cloudreve/cloudreve/commit/1c5cad6dec7ec3037c6479e3a26a3909995d16a2)\n- [Cloudreve 4.18.0 Release](https://github.com/cloudreve/cloudreve/releases/tag/4.18.0)\n- [CVE-2026-79913 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-79913)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-79913) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T02:32:16.533715Z"}, {"uuid": "6969f191-4776-4ca6-ae5a-74307f8e4b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79918", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117395934708563318", "content": "CVE-2026-79918 MaxKB sandbox escape: ToolExecutor misses fexecve, letting authenticated tool code spawn processes outside policy. CVSS 6.3. Fixed in 2.10.6-lts; patch still under review, so update as soon as it ships. https://www.valtersit.com/cve/CVE-2026-79918/ #CVE #infosec #MaxKB", "creation_timestamp": "2026-10-06T20:50:12.023389Z"}, {"uuid": "8cdffae7-509f-498b-98c1-8d89a7b819a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79919", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117397588092671193", "content": "CVE-2026-79919 MaxKB sandbox escape lets authenticated users read/write files, run processes, reach networks. CVSS 6.3. Patch under review. Apply 2.10.6-lts when released. https://www.valtersit.com/cve/CVE-2026-79919/ #CVE #infosec #MaxKB", "creation_timestamp": "2026-10-07T03:50:34.041472Z"}]}