Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-18 | 2 | Disclosure1General1 |
| 2026-07-19 | 2 | Disclosure1PoC1 |
CVE-2026-16125 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the … https://www.cve.org/CVERecord?id=CVE-2026-16125
Post summary
A vulnerability (CVE-2026-16125) was identified in zevorn rt-claw up to version 0.2.0, affecting specific network functions; no further exploitation, patch, or technical details are disclosed.
CVE-2026-16125 - SSRF in Zevorn rt-claw up to 0.2.0. Remote exploitation via url argument in claw_net_get/claw_net_post. CVSS 7.3. Exploit public, no patch available. Monitor or isolate affected systems. #CVE #Zevorn #infosec #devsecops #devops #developer #sysadmin https://www.valtersit.com/cve/CVE-2026-16125
Post summary
CVE-2026-16125 is an SSRF vulnerability in Zevorn rt‑claw up to 0.2.0 with an available public exploit, no patch yet, so affected systems should be monitored or isolated.
#CVE-2026-16125 - #SSRF in Zevorn rt-claw up to 0.2.0. Remote exploitation via http_request argument manipulation. #CVSS 7.3. Public exploit available. Unpatched. Update or mitigate immediately. #CVEalert #infosec #Zevorn #devsecops #devops #sysadmin https://www.valtersit.com/cve/CVE-2026-16125
Post summary
Public exploit for CVE-2026-16125 (SSRF in Zevorn rt-claw) is available and unpatched; stakeholders are advised to update or mitigate immediately.
🚨*CVE* CVE-2026-16125 A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the … https://www.cve.org/CVERecord?id=CVE-2026-16125 ----- Traducción: CVE-2026-16125 Se … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑16125 found in zevorn rt‑claw’s network functions, linking to the CVE record but offering no PoC, exploit, patch, or active exploitation details.