Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-25765

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-25765.

Coverage Span: 2026-03-03
Reports: 1 related reports

Associated Reports & Timeline

How Neo found an SSRF vulnerability in Faraday, and why it matters for every team that ships code

Neo independently found an SSRF in Faraday, the popular Ruby HTTP client: a URL like //evil.com overrides the destination host. Tracked as CVE-2026-25765 (CVSS 5.8), fixed in Faraday 2.14.1.