THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82648 (HIGH 7.1) — WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe

[NVD] CVE-2026-82648 (HIGH 7.1) — WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe

mednvdPublished 2026-08-30

CVE-2026-82648 CVSS: 7.1 HIGH Published: 2026-08-30T15:16:45.300

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfa

Indicators of compromise

CVE-2026-82648cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82648