CVE-2026-82648
Received Received - Intake

SSRF Bypass via Hex-Encoded NAT64 in AVideo

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulnCheck

Description
WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud metadata services and loopback interfaces.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-30
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82648
EUVD
EUVD-2026-68234

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wwbn avideo *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82648 is a Server-Side Request Forgery (SSRF) filter bypass vulnerability in WWBN AVideo. The SSRF protection fails to normalize NAT64 addresses properly. Attackers can bypass protections by using hexadecimal NAT64 addresses like 64:ff9b::a9fe:a9fe, which are translated to internal IPv4 addresses such as cloud metadata or loopback services. The flaw occurs because the filter only matches dotted-quad NAT64 addresses, not hexadecimal forms.

Detection Guidance

To detect this vulnerability, monitor network traffic for outbound requests to NAT64 addresses in hexadecimal form (e.g., 64:ff9b::a9fe:a9fe). Check AVideo logs for unusual URL fetches or redirects. Use tools like tcpdump or Wireshark to inspect traffic for hex-encoded NAT64 patterns.

Impact Analysis

This vulnerability allows attackers to bypass SSRF protections and access internal services like cloud metadata or loopback interfaces. This could lead to unauthorized access to sensitive data, credential disclosure if metadata services expose role credentials, or further exploitation of internal systems. The impact is significant in IPv6-only or cloud networks where NAT64 is used.

Compliance Impact

This SSRF vulnerability could lead to unauthorized access to sensitive internal services, such as cloud metadata or loopback interfaces. If exploited, it may expose sensitive data like credentials or personal information, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information.

Mitigation Strategies

Apply the official patch from WWBN AVideo that replaces textual matching with value-based comparison using inet_pton(). Update SSRF filters to block all NAT64 address formats, including hexadecimal. Restrict outbound traffic to trusted cloud metadata services and loopback interfaces.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82648. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart