Skip to content
Threat Feed
Subscribe

Product

Stoatchat < 0.14.0

1 brief RSS
high advisory

CVE-2026-63088: stoatchat Server-Side Request Forgery (SSRF) via DNS Blocklist Bypass

An unauthenticated, network-accessible Server-Side Request Forgery (SSRF) vulnerability, identified as CVE-2026-63088, exists in stoatchat versions prior to 0.14.0, allowing attackers to bypass DNS-based IP blocklists by exploiting incomplete address validation, potentially leading to unauthorized access to internal network resources.

stoatchat < 0.14.0 vulnerability ssrf web-application
1t 1c