CVE-2026-115700Published
SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-115700 · Microsoft / collected KEV context
cve-program · CVE-2026-115700
- https://github.com/benoitc/hackney/releases/tag/4.9.0
- https://cna.erlef.org/cves/CVE-2026-115700.html
- https://osv.dev/vulnerability/EEF-CVE-2026-115700
- https://github.com/benoitc/hackney/pull/987
- https://github.com/benoitc/hackney/commit/452620a92ec1da2e6b4862a049a2a4f04b42068f
- https://github.com/benoitc/hackney/commit/f19561a0b422376348c91537e51377ab7325f4ee
Related operational evidence
Explicit CVE identifiers- SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney · Newly collected advisory · 26 Oct 2026