Is CVE-2026-82648 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82648?

CVE-2026-82648 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-82648

Description

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.