CVE-2026-82648
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Aug 30, 2026
Vendor
unknown
Description
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.