tocsin

CVE-2026-44797

2 advisories.

PyPI/nautobot CVE-2026-44797: high 8.5, EPSS 0.40%

Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)

Action: Upgrade nautobot to 2.4.33 or later.

pip install nautobot==3.1.2
pip install nautobot==2.4.33

Affected

introducedfixedlast affected
3.0.0a23.1.2-
02.4.33-

Fixed versions

3.1.22.4.33

Sources

CVE-2026-44797 · published · modified · JSON

PyPI/nautobot CVE-2026-44797: high 8.5, EPSS 0.40%

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, Nautobot's Webhook data model and associated feature set could be configured by users with sufficient

Action: Upgrade nautobot to 2.4.33 or later.

pip install nautobot==2.4.33
pip install nautobot==3.1.2

Affected

introducedfixedlast affected
02.4.33-
3.0.03.1.2-

Fixed versions

2.4.333.1.2

Sources

CVE-2026-44797 · published · modified · JSON