CVE-2026-73080

creationtimestamp| type| source ---|---|--- 2026-08-11 16:32:21+00:00| seen| https://gist.github.com/alon710/6fa389a21aaf392bd94e8f902ff02560 2026-08-11 16:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst33mum6g2b 2026-08-11 17:01:03+00:00| seen|...

CVE-2026-73080 SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volumegrpcremote.go fetches a caller-supplied remote endpoint through weed/remotestorage/s3/s3storageclient.go and writes the response into a needle. The RPC performs no authentication and no...