stunnel vulnerabilities
CVEs whose affected-version data names the stunnel package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-70367Medium· 5.4PoCStunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services
A Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.…
▾ TwilightMobi-Com Polska Sp. z o.o. · stunnelEPSS 0.22%via CVEORG
CVE-2026-70368Medium· 6.5Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message
A stack-based out-of-bounds read vulnerability exists in the "s_vlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that tri…
▾ SunlitMobi-Com Polska Sp. z o.o. · stunnelEPSS 0.35%via CVEORG