Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:46:41 +0000 CVE-2026-70367 — Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to lo… https://vulnerability.circl.lu/vuln/cve-2026-70367 <p><strong>Affected:</strong> Mobi-Com Polska Sp. z o.o. stunnel, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses (&#34;0.0.0.0&#34;, &#34;::&#34;), enabling access to loopback-only services on the &#34;stunnel&#34; host that should not be network-reachable.</p> <p><strong>Affected:</strong> Mobi-Com Polska Sp. z o.o. stunnel, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses (&#34;0.0.0.0&#34;, &#34;::&#34;), enabling access to loopback-only services on the &#34;stunnel&#34; host that should not be network-reachable.</p> https://vulnerability.circl.lu/vuln/cve-2026-70367