Read the docs

ccfos

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ccfos records in CISA KEV

No ccfos vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-58803 CVE-2026-85692 · GHSA-wc5f-hgwx-ffx9

Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

Priority MEDIUM 64

Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-09-04 No fix listed CWE-918
TI-2026-41885 CVE-2026-58167 · GHSA-27c6-wp53-387x

Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege Users

Priority LOW 31

Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privileg…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-06-30 Fixed in 9.0.0-beta.2, 6.7.3-0.20260528033214-762819fbaa23 CWE-862
Open these records in search →