AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-70367

MEDIUM · CVSS 5.4 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A vulnerability in "stunnel" versions 5.79 and lower, when configured in SOCKS proxy mode, allows attackers to exploit Server-Side Request Forgery (SSRF) by bypassing localhost restrictions through the use of IPv4-mapped IPv6 addresses or unspecified addresses. This can grant unauthorized access to loopback-only services on the host, potentially exposing sensitive information or services. Organizations using affected versions of "stunnel" should prioritize patching to mitigate the risk of unauthorized access to internal resources.

CVE
CVE-2026-70367
Severity
MEDIUM
CVSS
5.4
EPSS
0.15%

Original NVD Description

A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.