CVE-2026-73160

creationtimestamp| type| source ---|---|--- 2026-08-11 10:50:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jlzqyzkwrxgvq...

CVE-2026-73160 cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetchmispevent and /mispsearchevents endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domain...