CVE-2026-16196

creationtimestamp| type| source ---|---|--- 2026-07-19 00:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxim5g6q62j...

CVE-2026-16196 Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component webfetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made...