Lucene search
+L

3 matches found

EUVD
EUVD
•added 2026/01/29 9:21 p.m.•15 views

EUVD-2026-4951

TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In tcpforwarder.rs, SSRF protection for allowprivatenetworkconnections = false was only applied in the TcpDestination::HostNamepeer path. The...

7.1CVSS5.9AI score0.00239EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/29 9:21 p.m.•35 views

CVE-2026-24902 TrustTunnel has SSRF and private network restriction bypass via numeric address destinations

TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In tcpforwarder.rs, SSRF protection for allowprivatenetworkconnections = false was only applied in the TcpDestination::HostNamepeer path. The...

7.1CVSS0.00239EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/01/29 9:21 p.m.•19 views

CVE-2026-24902 TrustTunnel has SSRF and private network restriction bypass via numeric address destinations

TrustTunnel is an open-source VPN protocol with a server-side request forgery and and private network restriction bypass in versions prior to 0.9.114. In tcpforwarder.rs, SSRF protection for allowprivatenetworkconnections = false was only applied in the TcpDestination::HostNamepeer path. The...

7.1CVSS5.9AI score0.00239EPSS
SaveExploits1References2
Rows per page
Query Builder