TI-2026-26131 CVE-2026-33752 · GHSA-qw2m-4pqf-rmpp
Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)
Priority HIGH 76
curl_cffi is the a Python binding for curl.
lexiforest
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
lexiforest records in CISA KEVNo lexiforest vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record