{"vulnerability": "cve-2026-8725", "sightings": [{"uuid": "31513753-edc7-49d7-90cc-b52e19c34113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8725", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116587680874193200", "content": "\ud83d\udee1\ufe0f CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 \u2013 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic & monitor logs. Exploit is public. https://radar.offseq.com/threat/cve-2026-8725-server-side-request-forgery-in-corew-ac445f41 #OffSeq #SSRF #Vuln #BlueTeam", "creation_timestamp": "2026-05-17T03:00:39.192750Z"}, {"uuid": "c9e5d506-c2aa-4afb-885d-69da57649b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8725", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlzen4c7jy2l", "content": "\ud83d\udea9 MEDIUM severity SSRF in CoreWorxLab CAAL v1.0 \u2013 1.6.0. Exploit is public, no patch yet. Restrict outbound requests & use WAF rules until guidance is released. https://radar.offseq.com/threat/cve-2026-8725-server-side-request-forgery-in-corew-ac445f41 #OffSeq #SSRF #Vulnerability", "creation_timestamp": "2026-05-17T03:01:57.072559Z"}, {"uuid": "966dbd7f-18b4-4243-be15-a7382bf16fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlzkmhinu32e", "content": "CVE-2026-8725 - CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery\nCVE ID : CVE-2026-8725\n \n Published : May 17, 2026, 2:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected elem...", "creation_timestamp": "2026-05-17T04:47:32.704663Z"}, {"uuid": "2f48ecad-725b-4301-a300-7852fdb6e188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87254", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:49.823837Z"}, {"uuid": "630b4a56-3aa9-46b1-b43a-c1a08badf502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87250", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:51.748023Z"}, {"uuid": "cfa2054e-dace-41da-85e9-b9e4c23aacc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87259", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:42.549218Z"}, {"uuid": "3f290c6b-4db1-43db-80da-e61c50d8aeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87258", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:44.091789Z"}, {"uuid": "78fae5e9-9e8b-4a9b-a22d-c330a02c8b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87257", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:45.952769Z"}, {"uuid": "517d2082-5c84-494e-8fc8-36703c08352b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87256", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11", "content": "", "creation_timestamp": "2026-09-23T08:45:47.892849Z"}]}