CVE-2026-118376

The WeKnora software (versions prior to 0.8.2 ) contains a server-side request forgery (SSRF) vulnerability in the isRestrictedIP() function. The root cause is the misclassification of NAT64-prefixed IPv6 addresses as public addresses. This allows authenticated attackers to provide URLs that reso...

EUVD-2026-111552

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...