CVE-2026-115411
Last modified
CVE-2026-115411 is a medium-severity vulnerability rated 5/10 on the CVSS scale. crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additionally fails to pin the validated address for the actual outbound connection, allowing a TOCTOU DNS rebinding bypass. An authenticated attacker can add a malicious domain that resolves to an internal or restricted address, trigger a crawl to reach internal services or cloud metadata endpoints like 169.254.169.254, and retrieve the fetched page's title, description, headings, status code and links through the crawl results API, enabling internal network reconnaissance..
Description
crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additionally fails to pin the validated address for the actual outbound connection, allowing a TOCTOU DNS rebinding bypass. An authenticated attacker can add a malicious domain that resolves to an internal or restricted address, trigger a crawl to reach internal services or cloud metadata endpoints like 169.254.169.254, and retrieve the fetched page's title, description, headings, status code and links through the crawl results API, enabling internal network reconnaissance.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| crawlseo | crawlseo | >= 0.1.0, < 0.2.4 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-115411?
How severe is CVE-2026-115411?
How do I fix CVE-2026-115411?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-11538IBM WebSphere Application Server 9.0 and 8.5 is affected by …5.3
- CVE-2026-11539IBM WebSphere Application Server 9.0 and 8.5 is affected by …5.3
- CVE-2026-1154A flaw has been found in SourceCodester E-Learning System 1.…5.4
- CVE-2026-11540IBM WebSphere Application Server 9.0 and 8.5 could allow a r…5.3
- CVE-2026-115400crawlseo before version 0.2.5 contains a cleartext storage v…4.4
- CVE-2026-11541IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.…9.8
- CVE-2026-115416Incorrect authorization checks in Amazon Athena engine versi…7.7
- CVE-2026-11545IBM WebSphere Application Server 8.5 and 9.0 could allow a r…3.7
- CVE-2026-115450External Control of Assumed-Immutable Web Parameter (CWE-472…7.1
- CVE-2026-115453Authorization Bypass Through User-Controlled Key (CWE-639) i…7.1
- CVE-2026-115454An excessive resource allocation issue in the remote workflo…5.3
- CVE-2026-11546IBM WebSphere Application Server - Liberty 17.0.0.3 through …9.8
Are you affected by CVE-2026-115411?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST