CVE-2026-112288
Received Received - Intake

Krayin CRM SSRF Filter Bypass via DNS Rebinding

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attackers can return a public address during WebhookService::isSafeEndpoint() validation and an internal address when Guzzle re-resolves, sending blind requests to internal services and cloud metadata endpoints.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112288
EUVD
EUVD-2026-104285

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
krayin laravel-crm 2.2.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Krayin CRM 2.2.5 before 2.2.7 has a server-side request forgery (SSRF) vulnerability. It allows users with webhook permissions to bypass SSRF protections and send requests to internal addresses using DNS rebinding. During validation, the system checks a public address, but when re-resolving via Guzzle, it reaches an internal address, enabling blind requests to internal services or cloud metadata endpoints.

Detection Guidance

To detect this SSRF vulnerability via DNS rebinding in Krayin CRM, monitor outbound HTTP requests from the webhook service. Check if requests are made to internal IP ranges (e.g., 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) or cloud metadata endpoints (e.g., 169.254.169.254). Inspect DNS resolution logs for domains resolving to both public and internal IPs within a short timeframe.

Impact Analysis

This vulnerability could allow attackers with webhook permissions to access internal systems or cloud metadata endpoints. It may lead to unauthorized data exfiltration, internal service manipulation, or further network compromise depending on the exposed services.

Compliance Impact

This SSRF vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized access to internal services and cloud metadata endpoints. If exploited, attackers might exfiltrate sensitive data from internal systems, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. The blind request capability could enable lateral movement within networks to access regulated data.

Mitigation Strategies

Upgrade Krayin CRM to version 2.2.7 or later to address the server-side request forgery filter bypass vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112288. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart