{"vulnerability": "cve-2026-63107", "sightings": [{"uuid": "c10c595d-1401-4de4-af59-ea2a6fdc2152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:54.979081Z"}, {"uuid": "356c645f-81d1-4d1e-9c42-802b5dae2717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116954824349658240", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:55.262169Z"}]}