{"id":"CVE-2026-71272","published":"2026-08-05T13:24:51.573","lastModified":"2026-08-10T12:17:29.693","description":"Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPort(host, port) using the original hostname rather than the already-validated IP address.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cwes":["CWE-367"],"vendors":[],"products":[],"references":[{"url":"https://github.com/usememos/memos","tags":[]},{"url":"https://github.com/usememos/memos/blob/main/internal/webhook/webhook.go","tags":[]}],"exploitRefs":[{"url":"https://github.com/usememos/memos","tags":[]},{"url":"https://github.com/usememos/memos/blob/main/internal/webhook/webhook.go","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows attackers to manipulate hostname resolution and potentially execute code by exploiting DNS rebinding or similar techniques.","exploitability":"Exploitation requires control over DNS records and network conditions that allow DNS rebinding, making it moderately difficult.","blast_radius":"If exploited, the impact could be high, allowing remote code execution on affected systems.","remediation":"Update Memos to use validated IP addresses in the dialing process instead of the original hostname.","tags":["rce","dns-rebinding","webhook","network"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:48:33.515Z"}}