Back to the CVE list
CVE-2026-33752

Server-side request forgery in Lexiforest Curl Cffi

CVSS score

8.6

EPSS probability

%0.5

Risk score

0.0

Published

6 mo ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
redyank/CVE-2026-33752
GitHub

CVE-2026-33752(Redirect-based SSRF leading to internal network access in curl_cffi) (★0)

Public PoCSource updated: 03.04.2026 14:13:59
G
lexiforest/curl_cffi/security/advisories/GHSA-qw2m-4pqf-rmpp
GitHub

https://github.com/lexiforest/curl_cffi/security/advisories/GHSA-qw2m-4pqf-rmpp

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33752"