01 Record

CVE-2026-72777

Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url

HighPUBLISHEDCNA: VulnCheck

Base score7.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

02 Description

Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url

Published: 2026-08-13 18:23Z1 DAY AGO
Last updated: 2026-08-14 16:51Z1 HR AGO
Reserved: 2026-08-10
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: High (CVSS 7.7)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Weaknesses: CWE-918
SSVC decision: ExploitationpocAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: fc9cf7ff36c66dcb14d37f9026032daf1f43ad8c042c4fda7058b6c2842d21cf

VendorProductVersionsPlatforms

DayuanJiangnext-ai-draw-io0 to 0.4.16—