https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:59:33.600540+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/37a31a53-ae77-4c80-b502-6d611cc7d333/export 2026-09-17T10:59:33.610854+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "37a31a53-ae77-4c80-b502-6d611cc7d333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8267", "type": "seen", "source": "https://gist.github.com/alon710/bda89e90af91af7f573f2d831677b6d7", "content": "# CVE-2025-8267: CVE-2025-8267: Server-Side Request Forgery Bypass via Multicast Address Exclusion in ssrfcheck\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-05-05\n> **Full Report:** https://cvereports.com/reports/CVE-2025-8267\n\n## Summary\nThe ssrfcheck npm package before version 1.2.0 contains a Server-Side Request Forgery (SSRF) vulnerability due to an incomplete blocklist of reserved IP address ranges. By omitting the IPv4 Multicast range (224.0.0.0/4), the library allows attackers to bypass validation and issue requests targeting internal network infrastructure.\n\n## TL;DR\nA flaw in the ssrfcheck npm library (< 1.2.0) allows attackers to bypass SSRF protections by providing URLs resolving to IPv4 Multicast addresses. This enables targeted requests against internal services such as UPnP and mDNS.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v4.0**: 8.8 (High)\n- **CVSS v3.1**: 8.2 (High)\n- **EPSS Score**: 0.00119\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV**: Not Listed\n\n## Affected Systems\n\n- Node.js applications utilizing ssrfcheck < 1.2.0\n- Internal network infrastructure exposed to multicast routing (SSDP, UPnP, mDNS)\n- **ssrfcheck**: < 1.2.0 (Fixed in: `1.2.0`)\n\n## Mitigation\n\n- Upgrade the ssrfcheck dependency to version 1.2.0 or later to implement the complete private CIDR blocklist.\n- Enforce network-level egress filtering to drop traffic directed at the 224.0.0.0/4 IPv4 Multicast range.\n- Implement comprehensive strict allow-listing for outbound network connections where business requirements permit.\n- Audit secondary validation logic for missing IPv6 reserves, such as ff00::/8.\n\n**Remediation Steps:**\n1. Run `npm audit` or use equivalent dependency scanning tools to identify projects utilizing vulnerable versions of ssrfcheck.\n2. Update the package.json dependency requirement to `>=1.2.0`.\n3. Execute `npm install` or `yarn install` to update the lockfile and download the patched package.\n4. Deploy the updated application and verify that validation tests utilizing `239.255.255.250` now return a failure state.\n\n## References\n\n- [NVD Record CVE-2025-8267](https://nvd.nist.gov/vuln/detail/CVE-2025-8267)\n- [Snyk Advisory SNYK-JS-SSRFCHECK-9510756](https://security.snyk.io/vuln/SNYK-JS-SSRFCHECK-9510756)\n- [Fix Commit in ssrfcheck repository](https://github.com/felippe-regazio/ssrfcheck/commit/9507b49fd764f2a1a1d1e3b9ee577b7545e6950e)\n- [GitHub Issue #5 Documenting Bypass](https://github.com/felippe-regazio/ssrfcheck/issues/5)\n- [Technical Bypass Gist by lirantal](https://gist.github.com/lirantal/2976840639df824cb3abe60d13c65e04)\n- [GitHub Advisory GHSA-c2fv-2fmj-9xrx](https://github.com/advisories/GHSA-c2fv-2fmj-9xrx)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-8267) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-05T20:40:29.000000Z"} 2026-05-05T20:40:29+00:00 https://vulnerability.circl.lu/sighting/61c4094d-0def-4f6a-ad9a-619bf7c9ae83/export 2026-09-17T10:59:33.613159+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "61c4094d-0def-4f6a-ad9a-619bf7c9ae83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8266", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlgttb42f", "content": "", "creation_timestamp": "2026-04-03T21:02:44.195894Z"} 2026-04-03T21:02:44.195894+00:00 https://vulnerability.circl.lu/sighting/a23eb340-fc1b-434f-8d71-33f3d59ac099/export 2026-09-17T10:59:33.613291+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "a23eb340-fc1b-434f-8d71-33f3d59ac099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8277", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00 https://vulnerability.circl.lu/sighting/07084e1a-0cd7-451b-9c3a-58aee6989df7/export 2026-09-17T10:59:33.615175+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "07084e1a-0cd7-451b-9c3a-58aee6989df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-8291", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"} 2026-03-18T00:00:00+00:00 https://vulnerability.circl.lu/sighting/8c5a8faa-1214-40a8-a0ec-6da317c6bbb7/export 2026-09-17T10:59:33.615319+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8c5a8faa-1214-40a8-a0ec-6da317c6bbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8277", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mfksgv64dgk2", "content": "", "creation_timestamp": "2026-02-23T23:26:31.169655Z"} 2026-02-23T23:26:31.169655+00:00 https://vulnerability.circl.lu/sighting/cc1eb5b4-a0ae-4187-a781-e0859465c9f3/export 2026-09-17T10:59:33.615425+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cc1eb5b4-a0ae-4187-a781-e0859465c9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8266", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-8266.yaml", "content": "", "creation_timestamp": "2026-02-11T09:38:10.000000Z"} 2026-02-11T09:38:10+00:00 https://vulnerability.circl.lu/sighting/1007cbd3-8613-4880-abeb-652611b6e4c0/export 2026-09-17T10:59:33.615522+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1007cbd3-8613-4880-abeb-652611b6e4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8217", "type": "seen", "source": "https://gist.github.com/alon710/5e694363b414288a55304335206db682", "content": "", "creation_timestamp": "2026-01-24T22:28:55.000000Z"} 2026-01-24T22:28:55+00:00 https://vulnerability.circl.lu/sighting/f1af78dc-2d00-4056-b650-c66519216b83/export 2026-09-17T10:59:33.615625+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f1af78dc-2d00-4056-b650-c66519216b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8217", "type": "seen", "source": "https://gist.github.com/alon710/689d4b4a36f24f9c99e58fa042536caa", "content": "", "creation_timestamp": "2026-01-24T22:28:52.000000Z"} 2026-01-24T22:28:52+00:00 https://vulnerability.circl.lu/sighting/8bd56c46-2545-4300-9b96-d56ac03fed2b/export 2026-09-17T10:59:33.615723+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8bd56c46-2545-4300-9b96-d56ac03fed2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8217", "type": "seen", "source": "https://gist.github.com/alon710/f4a98d8ab250f2affdf1bc9f675091cc", "content": "", "creation_timestamp": "2026-01-24T21:24:04.000000Z"} 2026-01-24T21:24:04+00:00 https://vulnerability.circl.lu/sighting/85713019-5b4b-4bff-aab6-c577d730f9bd/export 2026-09-17T10:59:33.615813+00:00 Alexandre Dulaunoy https://cve.circl.lu/user/adulau {"uuid": "85713019-5b4b-4bff-aab6-c577d730f9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-8291", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"} 2026-01-21T21:18:16.771453+00:00