{"vulnerability": "cve-2026-7308", "sightings": [{"uuid": "4369a767-a85c-484b-8218-1c57888326d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllz5cozyv2i", "content": "CVE-2026-7308 - Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page\nCVE ID : CVE-2026-7308\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : An authenticated user with upload permission to a hosted repository can store content tha...", "creation_timestamp": "2026-05-11T19:30:15.598338Z"}, {"uuid": "0e701520-b32d-4558-b655-149fbe0f7b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllz5cozyv2i", "content": "CVE-2026-7308 - Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page\nCVE ID : CVE-2026-7308\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : An authenticated user with upload permission to a hosted repository can store content tha...", "creation_timestamp": "2026-05-11T19:30:15.600626Z"}, {"uuid": "1ef6d0e0-36c8-481e-a855-9c3840e468c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73080", "type": "seen", "source": "https://gist.github.com/alon710/6fa389a21aaf392bd94e8f902ff02560", "content": "# CVE-2026-73080: CVE-2026-73080: Unauthenticated Server-Side Request Forgery (SSRF) in SeaweedFS Volume Server\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73080\n\n## Summary\nA critical-severity Server-Side Request Forgery (SSRF) vulnerability exists in SeaweedFS volume servers prior to version 4.24. Unauthenticated attackers can trigger arbitrary HTTP requests to internal networks and cloud metadata services via the gRPC endpoint and retrieve the response data.\n\n## TL;DR\nUnauthenticated remote attackers can abuse a gRPC endpoint in SeaweedFS to perform full-read Server-Side Request Forgery (SSRF), exposing internal services and cloud instance metadata.\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS Score**: 9.3\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS Volume Server\n- **SeaweedFS**: < 4.24 (Fixed in: `4.24`)\n\n## Mitigation\n\n- Upgrade SeaweedFS to version 4.24 or higher\n- Restrict gRPC ports (e.g., 18080) to trusted cluster members\n- Ensure -volume.allowUntrustedRemoteEndpoints is not enabled\n- Enforce IMDSv2 with a hop limit of 1 on cloud instances\n\n**Remediation Steps:**\n1. Identify all running instances of SeaweedFS Volume Servers.\n2. Update the SeaweedFS binaries or container images to version 4.24 or higher.\n3. Verify that the startup flags do not contain -volume.allowUntrustedRemoteEndpoints.\n4. Apply firewall rules or security group policies to block public gRPC access.\n5. Monitor gRPC traffic for unauthorized FetchAndWriteNeedle calls.\n\n## References\n\n- [GitHub Security Advisory GHSA-87fv-vqqr-m4jr](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-87fv-vqqr-m4jr)\n- [SeaweedFS Pull Request #9441](https://github.com/seaweedfs/seaweedfs/pull/9441)\n- [Fix Commit 69da20bdaec923e5a43d8aa71bf3c0a2051fc019](https://github.com/seaweedfs/seaweedfs/commit/69da20bdaec923e5a43d8aa71bf3c0a2051fc019)\n- [SeaweedFS Release 4.24](https://github.com/seaweedfs/seaweedfs/releases/tag/4.24)\n- [CVE-2026-73080 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-73080)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73080) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T16:32:21.987701Z"}, {"uuid": "bde17007-cb03-423f-971d-084b0be00799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73080", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mst33mum6g2b", "content": "CVE-2026-73080 - seaweedfs\nA security flaw in SeaweedFS's Volume Server allows anyone with access to the server to make unauthorized requests to other hosts and read back the responses. This can be used to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#seaweedfs #Golang #CVE #infosec", "creation_timestamp": "2026-08-11T16:50:04.827602Z"}, {"uuid": "ea7263e1-023e-4d85-af4a-5c467aedb621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73080", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mst3p7xthj2t", "content": "\ud83d\udd34 CVE-2026-73080 - Critical (9.3)\n\nSeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in wee...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73080/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T17:01:03.485288Z"}]}