Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-79659 · Microsoft / collected KEV context

EUVD-2026-65455

GHSA-9g26-825h-8v6p

GHSA-8mc6-xjpr-h98x

GO-2026-5259

cve-program · CVE-2026-79659

• https://github.com/lin-snow/Ech0/security/advisories/GHSA-8mc6-xjpr-h98x
• https://www.vulncheck.com/advisories/ech0-before-server-side-request-forgery-via-fetchpeerconnectinfo

euvd · EUVD-2026-65455

• https://github.com/lin-snow/Ech0/security/advisories/GHSA-8mc6-xjpr-h98x
• https://www.vulncheck.com/advisories/ech0-before-server-side-request-forgery-via-fetchpeerconnectinfo

nvd · CVE-2026-79659

• https://github.com/lin-snow/Ech0/security/advisories/GHSA-8mc6-xjpr-h98x
• https://www.vulncheck.com/advisories/ech0-before-server-side-request-forgery-via-fetchpeerconnectinfo

osv · GHSA-8mc6-xjpr-h98x

• https://github.com/lin-snow/Ech0/security/advisories/GHSA-8mc6-xjpr-h98x
• https://github.com/lin-snow/Ech0/commit/091d26d2d942df6df9f520328d2f9cf2592bbefc
• https://github.com/lin-snow/Ech0

osv · GO-2026-5259

• https://github.com/lin-snow/Ech0/security/advisories/GHSA-8mc6-xjpr-h98x
• https://github.com/lin-snow/Ech0/commit/091d26d2d942df6df9f520328d2f9cf2592bbefc

No related operational record is retained in the current change model.