CVE-2026-82648 — WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form.…
Published: 2026-08-30 · CVSS: 7.1 · CVSS 4.0
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7