Get real-time updates on Telegram
P5
CVE-2026-76164: ail-framework 0 to before 7.0
CVE-2026-76164. EPSS 0.00405 (percentile 0.33547), scored 21-Oct-2026.
Affected technology
ail-framework · 0 to before 7.0
ail-project
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. Source advisory’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.
- CWE
- CWE-918
- CCR priority
- 0.1 /100 (P5)
- EPSS
- 0.00405 · percentile 0.33547 · 2026-10-21
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-22 20:50:20.011821+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-76164.html