CVE-2026-118376

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

CVE-2026-118376 WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

CVE-2026-118376 WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

CVE-2026-118376

The WeKnora software (versions prior to 0.8.2 ) contains a server-side request forgery (SSRF) vulnerability in the isRestrictedIP() function. The root cause is the misclassification of NAT64-prefixed IPv6 addresses as public addresses. This allows authenticated attackers to provide URLs that reso...

CVE-2026-118376

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

CVE-2026-118376 WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

EUVD-2026-111552

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

PT-2026-127742

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web fetch or URL-based knowledge import to reach...

CVE-2026-118376: Tencent WeKnora: WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies…

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via webfetch or URL-based knowledge import to reach...

Tencent WeKnora server request forgery vulnerability

Versions prior to Tencent WeKnora 0.8.2 contain a server-side request forgery vulnerability. This vulnerability arises because the isRestrictedIP function incorrectly treats IPv6 addresses with a NAT64 prefix as public addresses. As a result, authenticated attackers may exploit URLs parsed as...

EUVD-2026-84159

MaxKB is an open-source AI assistant for enterprise. In version 2.10.3-lts and earlier, the knowledge web-document import and synchronization crawler passes an authenticated workspace user's URL to Fork.fork, which calls requests.get with verify=False and without restricting schemes, loopback,...