CVE-2026-110240
Last modified
CVE-2026-110240 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal IPv4, to reach internal services or cloud metadata endpoints..
Description
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding internal IPv4, to reach internal services or cloud metadata endpoints.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| duke-git | lancet | >= 2.1.2, <= 2.3.9 |
| duke-git | lancet | >= 1.3.1, <= 1.4.6 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-110240?
How severe is CVE-2026-110240?
How do I fix CVE-2026-110240?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110235MP Manager through 1.1.0 contains a path traversal vulnerabi…5.5
- CVE-2026-110236KDE Dolphin 24.08.0 through 26.08.2 contains an OS command i…7
- CVE-2026-110237Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIF…7.3
- CVE-2026-110238Rapyd Admin from 9.0.0 before 9.20.0 contains an authorizati…8.8
- CVE-2026-110239Rapyd Admin before 9.20.0 contains a stored cross-site scrip…4.4
- CVE-2026-11024Stack buffer overflow in Skia in Google Chrome prior to 149.…8.8
- CVE-2026-110247Several buffer-growth sites in libmime performed size arithm…
- CVE-2026-110248Insertion of sensitive information into log files in the git…5.3
- CVE-2026-110249A malicious, compromised, or MITM-controlled Exchange server…
- CVE-2026-11025Insufficient policy enforcement in Navigation in Google Chro…6.5
- CVE-2026-110252The WPeMatico RSS Feed Fetcher plugin for WordPress is vulne…5.4
- CVE-2026-110253The weForms – Easy Drag & Drop Contact Form Builder For Word…5.4
Are you affected by CVE-2026-110240?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST