Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-73058 stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via t… https://www.cve.org/CVERecord?id=CVE-2026-73058
Post summary
The text announces a SSRF bypass in stoatchat via the IPv6 unspecified address, but gives no evidence of exploitation, tools, or patches.
🚨*CVE* CVE-2026-73058 stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via t… https://www.cve.org/CVERecord?id=CVE-2026-73058 ----- Traducción: CVE-2026-73058 sto… https://infoflow.cloud`
Post summary
The tweet announces CVE-2026-73058, detailing an SSRF vulnerability in Stoatchat that lets unauthenticated users bypass defenses via the IPv6 unspecified address, but does not provide a PoC, exploit code, or patch information.