CVE-2026-44797Disclosure(networktocode / nautobot)

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be configured by users with sufficient access to perform requests to various hosts and IP addresses that should not be permitted, allowing for various behaviors similar to server-side request forgery (SSRF). This vulnerability is fixed in 2.4.33 and 3.1.2.

networktocode CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

nautobot

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 4 classified signals
Peaked 1d ago at 3 mentions (2026-05-28); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

networktocode

Products

nautobot

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-28	3	Disclosure3
2026-05-29	1	Disclosure1

Full discourse4 posts

CVE@CVEnew136d
Disclosure
CVE-2026-44797 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be co… https://www.cve.org/CVERecord?id=CVE-2026-44797
Post summary
The text announces CVE-2026-44797, noting its impact on Nautobot's webhook data model before versions 2.4.33 and 3.1.2, without providing additional details such as exploitation, fixes, or technical specifics.
00010199
57.5K followersView on X
DailyCVE@dailycve136d
Disclosure
🔴 Nautobot, SSRF, #CVE-2026-44797 (High) -DC-May2026-45 https://dailycve.com/nautobot-ssrf-cve-2026-44797-high-dc-may2026-45/
Post summary
The tweet announces the Nautobot SSRF vulnerability CVE-2026-44797, labeling it high severity and linking to a dailycve article for details.
0000048
207 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-44797 Server-Side Request Forgery Vulnerability in Nautobot Before 2.4.... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44797 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces a Server‑Side Request Forgery vulnerability (CVE‑2026‑44797) in Nautobot versions prior to 2.4, offering no PoC, exploit details, or patch information.
0000042
4.0K followersView on X
Infoflowcloud@infoflowcloud136d
Disclosure
🚨*CVE* CVE-2026-44797 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be co… https://www.cve.org/CVERecord?id=CVE-2026-44797 ----- Traducción: CVE-2026-44797 Nau… http://infoflow.cloud`
Post summary
The post only links to the CVE record for CVE-2026-44797, providing the affected version numbers but no further technical details, exploits, or remediation guidance.
0000033
79 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	networktocode	nautobot	-	-	-

Explore more

Back to dashboard networktocode CVEs nautobot vulnerabilities

What researchers are saying

CVE-2026-44797

CVE@CVEnewDisclosure

The text announces CVE-2026-44797, noting its impact on Nautobot's webhook data model before versions 2.4.33 and 3.1.2, without providing additional details such as exploitation, fixes, or technical specifics.

DailyCVE@dailycveDisclosure

The tweet announces the Nautobot SSRF vulnerability CVE-2026-44797, labeling it high severity and linking to a dailycve article for details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces a Server‑Side Request Forgery vulnerability (CVE‑2026‑44797) in Nautobot versions prior to 2.4, offering no PoC, exploit details, or patch information.

Infoflowcloud@infoflowcloudDisclosure

The post only links to the CVE record for CVE-2026-44797, providing the affected version numbers but no further technical details, exploits, or remediation guidance.