CVE-2026-85569 Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification

The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it...

Linux Distros Unpatched Vulnerability : CVE-2025-45480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary. CVE-2025-45480 Note that Nessus relies ...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight (SDN controller) at commit 71fe8a7 contains a vulnerability where a port is misclassified as a non-boundary , enabling disruption of host communication via link spoofing . The CVSS 3.1 score is 3.0 (LOW) with an adjacent network attack vector, high complexity, and low privileges requir...

EUVD-2025-210893

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

PT-2026-90943

Name of the Vulnerable Software and Affected Versions Floodlight version 71fe8a7 Description Link spoofing can lead to the disruption of host communication because a port is misclassified as a non-boundary. Recommendations At the moment, there is no information about a newer version that contains...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

PT-2026-89354

An authorization bypass vulnerability exists in the Countly Server DBViewer due to flawed sub-pipeline detection in the aggregation stage sanitizer. The /o/db aggregation endpoint parses user-controlled aggregation JSON and passes it through a stage sanitizer that determines whether a nested arra...

CVE-2026-87999 Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/openwebui/retrieval/web/utils.py treated Python's globally routable address classification as proof th...

Security Bulletin: vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses.

Summary Upgrade to InformixHQ 3.3.2 Vulnerability Details CVEID:CVE-2026-54272 DESCRIPTION: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6...

SUSE CVE-2026-55245

Bifrost is an enterprise AI gateway for routing requests to model providers. Prior to 1.5.17, the isPublicIP function in core/providers/utils/fetch.go, reached through FetchAndEncodeURL for Bedrock and Vertex image or document URLs, classifies Carrier-Grade NAT 100.64.0.0/10, IPv6 6to4 2002::/16,...

CVE-2026-86544

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

CVE-2026-86544 knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions

knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Attackers with read-restricted sessions can exploit code.replace to modify permission configurations and escalate privileges on subsequent...

EUVD-2026-72539

Server-Side Request Forgery SSRF vulnerability in ash-project ashauthenticationoauth2server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. publicip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforces the...

CVE-2026-82757 ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF

Server-Side Request Forgery SSRF vulnerability in ash-project ashauthenticationoauth2server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. publicip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforces the...

EEF-CVE-2026-82757 ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF

Summary Server-Side Request Forgery SSRF vulnerability in ash-project ashauthenticationoauth2server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. publicip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforce...

PT-2026-86927

Server-Side Request Forgery SSRF vulnerability in ash-project ash authentication oauth2 server allows an attacker who controls a client metadata URL and its DNS to make the server connect to internal or loopback addresses. public ip?/1 in AshAuthentication.Oauth2Server.CIMD.ReqFetcher enforces th...

CVE-2026-59277

Spring Security InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. In Spring Security 7.1.0, the internal address classification did...

ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification

A flaw was found in the ip-address library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery SSRF due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassificatio...