Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16196 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the compon… https://www.cve.org/CVERecord?id=CVE-2026-16196
Post summary
The text announces CVE-2026-16196 as a weakness in the isPrivateOrRestrictedIP function of Sipeed PicoClaw up to 0.2.9, providing technical details but no PoC, exploit, or patch information.
🚨*CVE* CVE-2026-16196 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the compon… https://www.cve.org/CVERecord?id=CVE-2026-16196 ----- Traducción: CVE-2026-16196 Se … http://infoflow.cloud`
Post summary
CVE-2026-16196 is a weakness in Sipeed PicoClaw up to 0.2.9 affecting the isPrivateOrRestrictedIP function in pkg/tools/integration/web.go.