Skip to content
Threat Feed
Subscribe

Vendor

Flyto2

2 briefs RSS
high advisory

Flyto2 Core SSRF Vulnerability (CVE-2026-73530)

Flyto2 Core versions prior to 2.28.0 are susceptible to SSRF via an IPv6 loopback bypass in the is_private_ip() function, enabling access to internal services.

Flyto2 Core
1t 1c
high advisory

Flyto2 Core SSRF via Insecure Redirect Handling

Flyto2 Core HTTP modules perform insufficient SSRF revalidation on HTTP redirects, allowing attackers to reach internal resources and cloud metadata services.

Flyto2 Core
1t 1c