{"id":"CVE-2026-8712","title":"Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the…","summary":"Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the…","severity":"high","cvss":8.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","cwe":["CWE-918"],"published":"2026-09-01","updated":"2026-09-08","sourceUpdated":"2026-09-08T20:18:59.270","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8712","references":[{"url":"https://github.com/OHF-Voice/wyoming/releases/tag/v1.10.2","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/wyoming-ssrf-via-uri-query-parameter","label":"disclosure@vulncheck.com"}],"tags":["nvd","exploit-available"],"epss":0.00323,"epssPercentile":0.25153,"ingestedAt":"2026-09-08T21:11:12.289Z","exploits":{"github":1,"githubRepos":["https://github.com/rahulreddykarne/CVE-2026-8712-Wyoming"],"checkedAt":"2026-10-27T19:19:21.702Z"},"exploitAvailable":true,"slug":"CVE-2026-8712","body":"## Overview\n\nWyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the HTTP API. Attackers can pass arbitrary `tcp://` or `unix://` URIs to affected endpoints including /api/info, /api/speech-to-text, and /api/text-to-speech to override the server-configured backend and redirect connections to attacker-chosen hosts.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":58,"depthScoreParts":{"impact":45.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":211924,"id":"CVE-2026-8712","ts":1790602765518,"field":"exploit_available","old":"false","new":"true"}]}