Threats Tagged 'cve-2026-77972'
View all threats tagged with 'cve-2026-77972'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-77972'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-77972 is a critical Time-of-check Time-of-use (TOCTOU) race condition vulnerability in the Slab safeurl library affecting versions from 0.1.0 onward. The flaw allows an attacker controlling DNS responses for a hostname to bypass validation checks and reach internal network destinations that should be blocked. This occurs because validation returns only a verdict without the approved address, causing HTTP clients to resolve the hostname again at request time. An attacker can manipulate DNS responses between these lookups to redirect requests to unauthorized addresses. This issue also arises naturally when DNS records change between lookups due to short TTLs or address rotation. Join the discussion | CVE Database V5 | 09/15/2026, 15:37:49 UTC Added: 09/15/2026, 15:47:25 UTC |
Showing 1 to 1 of 1 result