CVE-2026-70367

Microsoft · Published August 7, 2026

5.4

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services. Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services

Affected Products

azl3 stunnel 5.74-1 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N