{"vulnerability": "cve-2026-8725", "sightings": [{"uuid": "31513753-edc7-49d7-90cc-b52e19c34113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8725", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116587680874193200", "content": "\ud83d\udee1\ufe0f CVE-2026-8725: SSRF in CoreWorxLab CAAL v1.0 \u2013 1.6.0 (MEDIUM). Remote, unauthenticated attackers can trigger server requests. No patch; restrict outbound traffic &amp; monitor logs. Exploit is public. https://radar.offseq.com/threat/cve-2026-8725-server-side-request-forgery-in-corew-ac445f41 #OffSeq #SSRF #Vuln #BlueTeam", "creation_timestamp": "2026-05-17T03:00:39.192750Z"}, {"uuid": "c9e5d506-c2aa-4afb-885d-69da57649b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8725", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlzen4c7jy2l", "content": "\ud83d\udea9 MEDIUM severity SSRF in CoreWorxLab CAAL v1.0 \u2013 1.6.0. Exploit is public, no patch yet. Restrict outbound requests &amp; use WAF rules until guidance is released. https://radar.offseq.com/threat/cve-2026-8725-server-side-request-forgery-in-corew-ac445f41 #OffSeq #SSRF #Vulnerability", "creation_timestamp": "2026-05-17T03:01:57.072559Z"}, {"uuid": "966dbd7f-18b4-4243-be15-a7382bf16fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlzkmhinu32e", "content": "CVE-2026-8725 - CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery\nCVE ID : CVE-2026-8725\n \n Published : May 17, 2026, 2:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected elem...", "creation_timestamp": "2026-05-17T04:47:32.704663Z"}]}