Ghostwire

CVE-2026-54494: Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or...

MEDIUM CVSS 0.0 Exploit Available

Published: July 15, 2026 | Last Modified: July 15, 2026

Description

Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

github.com/koel/koel/security/advisories/GHSA-rjg7-r26h-cfp2
github.com/koel/koel/pull/2549
github.com/koel/koel/commit/5f6ce2cefd08f437a269236b677ad971517ccbb6
github.com/koel/koel/releases/tag/v9.7.1
github.com/advisories/GHSA-rjg7-r26h-cfp2
www.tenable.com/cve/CVE-2026-54494
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-54494