Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: ccfos Clear all filters
TI-2026-58803 CVE-2026-85692 · GHSA-wc5f-hgwx-ffx9

Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

Priority MEDIUM 64

Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-09-04 No fix listed CWE-918
TI-2026-41885 CVE-2026-58167 · GHSA-27c6-wp53-387x

Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege Users

Priority LOW 31

Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privileg…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-06-30 Fixed in 9.0.0-beta.2, 6.7.3-0.20260528033214-762819fbaa23 CWE-862