Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/04 3:17 p.m.•23 views

CVE-2026-85692

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

7.1CVSS0.00436EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/04 2:32 p.m.•55 views

CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

7.1CVSS0.00436EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/04 2:32 p.m.•21 views

CVE-2026-85692

Nightingale (n9e) contains an SSRF guard bypass in the isPublicIP function within aiagent/tools/http.go, the SSRF protection for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against a forbidden-range list, failin...

7.1CVSS6AI score0.00436EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/04 2:32 p.m.•21 views

EUVD-2026-71141

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

7.1CVSS6AI score0.00436EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/04 2:32 p.m.•27 views

CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

7.1CVSS6AI score0.00436EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/04 2:32 p.m.•42 views

CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

7.1CVSS6AI score0.00436EPSS
SaveExploits0References6
Rows per page
Query Builder