Skip to content
Threat Feed
Subscribe

Product

Nukeviet < 4.6.00

1 brief RSS
high advisory

NukeViet Server-Side Request Forgery via X-Forwarded-Host (CVE-2026-55372)

An unauthenticated attacker can exploit a Server-Side Request Forgery (SSRF) vulnerability in NukeViet by spoofing the X-Forwarded-Host and X-Forwarded-Proto HTTP headers, allowing the server to make a cURL request to an attacker-controlled host without validation for internal host/port discovery and cache poisoning. The vulnerability affects NukeViet versions prior to 4.6.00.

nukeviet < 4.6.00 ssrf web-vulnerability nukeviet
2t