CVE-2026-100355

The web-based chat application Campfire is vulnerable to Server-Side Request Forgery (SSRF) in version 1.4.4 and earlier . The vulnerability exists because the RestrictedHTTP::PrivateNetworkGuard component fails to account for several special-use IP ranges, such as CGNAT (100.64.0.0/10), NAT64 (6...

CVE-2026-100355 Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard

Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the server fetches it to build an OpenGraph unfurl preview. RestrictedHTTP::PrivateNetworkGuard relied on Ruby's IPAddrprivate? IPAddrloopback?, and IPAddrlinklocal? predicates plus...