Mobi Com Polska Sp. Z O.O. Stunnel vulnerabilities
2 vulnerabilities
Known vulnerabilities in Mobi Com Polska Sp. Z O.O. Stunnel, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-70368mobi-com polska sp. z o.o. · stunnel +3 moreStunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log messageA stack-based out-of-bounds read vulnerability exists in the "s_vlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an out-of-bounds stack read and a potential crash. In certain corner cases, the same vulnerability could be used to replace a series of trailing "\n" characters with "\0".CVSS6.5MediumEPSS0.35%RoutineCVE-2026-70367mobi-com polska sp. z o.o. · stunnel +3 moreStunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only servicesA Server-Side Request Forgery (SSRF) bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses (e.g., “::ffff:127.0.0.1”) or unspecified addresses ("0.0.0.0", "::"), enabling access to loopback-only services on the "stunnel" host that should not be network-reachable.CVSS5.4MediumEPSS0.16%