https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:47:35.289025+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363035 EUVD-2026-363035 2026-10-08T15:47:35.291756+00:00 EUVD-2026-363035 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84697 fkie_cve-2026-84697 2026-10-08T15:47:35.291786+00:00

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations. Attackers can supply hostnames resolving to these addresses in message content to reach the link check API and proxy endpoint for accessing internal resources.

 https://cve.radiocsirt.org/vuln/ghsa-qx8f-9cjx-54j9 GHSA-qx8f-9cjx-54j9 2026-10-08T15:47:35.291818+00:00

Mailpit's IsInternalIP deny list function fails to block the Azure WireServer address 168.63.129.16 and the RFC 2765/6145 IPv4-translated IPv6 prefix, allowing server-side request forgery to internal destinations. Attackers can supply hostnames resolving to these addresses in message content to reach the link check API and proxy endpoint for accessing internal resources.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3138 WID-SEC-W-2026-3138 — MailPit: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-08T15:47:35.291836+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MailPit ausnutzen, um Informationen offenzulegen.