https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T15:50:47.922069+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112288 CVE-2026-112288 — Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding 2026-10-20T15:50:47.925849+00:00

Affected: krayin laravel-crm

Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.