CVE-2026-44797

Description

Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/nautobot/nautobot/security/advisories/GHSA-c35q-vxrp-ph26
• https://github.com/nautobot/nautobot/commit/16aa4aa9796ab7a31c4d615ec945e1f16d8c77c4
• https://github.com/nautobot/nautobot/commit/7324c8f0d8c7245fbc691e15d729adc2d2707d08
• https://github.com/nautobot/nautobot
• https://github.com/nautobot/nautobot/releases/tag/v2.4.33
• https://github.com/nautobot/nautobot/releases/tag/v3.1.2
• https://github.com/advisories/GHSA-c35q-vxrp-ph26