CVE-2026-82757 ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF

Server-Side Request Forgery SSRF vulnerability in ash-project ashauthenticationoauth2server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. publicip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforces the...

CVE-2026-82757

CVE-2026-82757 is a Server-Side Request Forgery (SSRF) vulnerability in the Elixir package ash_authentication_oauth2_server , affecting versions from 0.3.0 before 0.3.1. The flaw resides in the public_ip?/1 function of AshAuthentication.Oauth2Server.CIMD.ReqFetcher, which incorrectly classifies I...

CVE-2025-23018

An insecure configuration flaw was found in the IPv4-in-IPv6 and IPv6-in-IPv6 protocols RFC2473. When configured to not require authentication or filtering, this issue could allow a remote unauthenticated attacker to spoof packets or bypass access controls. Mitigation See references section for...

CVE-2025-23018

CVE-2025-23018 covers the IPv4-in-IPv6 tunneling case where RFC 2473 traffic can be accepted without validating the packet source. The result is spoofing and potential to route arbitrary traffic via an exposed network interface. Connected sources corroborate a lack of source verification for cert...

CVE-2025-23018

IPv4-in-IPv6 and IPv6-in-IPv6 tunneling RFC 2473 do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network interface. This is a similar issue to CVE-2020-10136...