PT-2026-60974 · Zevorn · Rt-Claw

Eric-Y · CVE-2026-16127 · Published 2026-07-18 · Updated 2026-07-18

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw net get/claw net post of the file claw/tools/tool net.c of the component http request. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-16127

Affected Products

Rt-Claw

References · 7

• 🔥 https://github.com/zevorn/rt-claw/issues/139 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16127 · Security Note
• https://vuldb.com/submit/856872 · Note
• https://vuldb.com/cve/CVE-2026-16127 · Note
• https://vuldb.com/vuln/379839 · Note
• https://github.com/zevorn/rt-claw · Note
• https://vuldb.com/vuln/379839/cti · Note