{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/gotenberg-8.31.0---8.37.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:gotenberg:gotenberg:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126799"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Gotenberg (8.31.0 - 8.37.x)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Gotenberg"],"content_html":"\u003cp\u003eGotenberg versions 8.31.0 through 8.37.x are vulnerable to a server-side request forgery (SSRF) vulnerability due to improper validation within the IsPublicIP function. This flaw allows unauthenticated attackers to bypass private-IP deny-list protections by appending IPv6 zone identifiers (e.g., %25eth0) to URLs processed by the application, such as in downloadFrom, webhook, or Chromium/LibreOffice configurations.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an attacker to bypass security restrictions and interact with internal network services that would otherwise be blocked. This enables the attacker to read responses from internal resources, which are subsequently returned within the generated PDF document.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade Gotenberg to version 8.38.0 or later immediately to patch CVE-2026-126799. As a temporary mitigation, restrict the ability of Gotenberg instances to reach internal network addresses or sensitive internal services through network-level firewall controls.\u003c/p\u003e\n","date_modified":"2026-11-11T22:08:11Z","date_published":"2026-11-11T22:08:11Z","id":"https://feed.craftedsignal.io/briefs/2026-11-gotenberg-ssrf-cve-2026-126799/","summary":"Gotenberg versions 8.31.0 through 8.37.x contain a server-side request forgery vulnerability in the IsPublicIP function, allowing unauthenticated attackers to bypass private IP restrictions via IPv6 zone identifiers to access internal network services.","title":"Gotenberg: Server-side request forgery vulnerability (CVE-2026-126799)","url":"https://feed.craftedsignal.io/briefs/2026-11-gotenberg-ssrf-cve-2026-126799/"}],"language":"en","title":"CraftedSignal Threat Feed - Gotenberg (8.31.0 - 8.37.x)","version":"https://jsonfeed.org/version/1.1"}