fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization

🗓️ 01 Oct 2026 15:04:05Reported by RedHatType

redhat🔗 access.redhat.com👁 2 Views

SSRF in fast-uri via malformed IPv6 normalization allows access to private targets.

Reporter	Title	Published	Views	Family All 347
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	22 Sep 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri (CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172)	7 Sep 202607:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities	1 Oct 202609:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in fast-uri (CVE-2026-75975, CVE-2026-76172)	29 Sep 202618:52	–	ibm
IBM Security Bulletins	Security Bulletin: fast-uri-3.1.5.tgz (Publicly disclosed vulnerability found by Scanner)	17 Sep 202620:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	21 Sep 202622:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules	7 Sep 202612:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities	22 Sep 202604:31	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in fast-uri.	29 Sep 202609:14	–	ibm
Tenable Nessus	AlmaLinux 10 : cockpit-image-builder (ALSA-2026:71543)	29 Sep 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	noarch	foreman	3.18.0.14-1.el9sat	foreman-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-cli	3.18.0.14-1.el9sat	foreman-cli-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-debug	3.18.0.14-1.el9sat	foreman-debug-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-dynflow-sidekiq	3.18.0.14-1.el9sat	foreman-dynflow-sidekiq-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-ec2	3.18.0.14-1.el9sat	foreman-ec2-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-journald	3.18.0.14-1.el9sat	foreman-journald-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-libvirt	3.18.0.14-1.el9sat	foreman-libvirt-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-openstack	3.18.0.14-1.el9sat	foreman-openstack-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-pcp	3.18.0.14-1.el9sat	foreman-pcp-3.18.0.14-1.el9sat.noarch.rpm
Red Hat Enterprise Linux	9	noarch	foreman-postgresql	3.18.0.14-1.el9sat	foreman-postgresql-3.18.0.14-1.el9sat.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-75975
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cna	www.cna.openjsf.org/security-advisories.html
github	www.github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-75975
cve	www.cve.org/CVERecord

01 Oct 2026 18:13Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

EPSS0.0022

SSVC

fast-uri Node.js SSRF IPv6 normalization address-policy bypass