Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-123201— buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API

Quick assessment

Affected

jarun buku

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Buku（bukuserver）5.1.1 及以下版本存在一个无需认证的服务器端请求伪造（SSRF）漏洞。远程攻击者可通过向或接口提供参数，诱导服务器向内部主机发起请求。攻击者可利用该漏洞针对回环地址、私有网络地址或云元数据 IP 地址发起攻击；这些地址能够绕过薄弱的检查并跟随重定向，从而用于探测内部服务并读取其页面标题、描述和关键词。

CVSS 5.3 · Medium Updated Nov 06, 2026

Possible ATT&CK Techniques 3 AI

T1046 · Network Service Discovery T1016 · System Network Configuration Discovery T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
jarun	buku	`≤ 5.1.1`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API

Source: CVE Program / CVE List V5

Vulnerability Description

Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_handle. Attackers can target loopback, private, or cloud metadata IP addresses, which pass the weak is_bad_url() check and follow redirects, to discover internal services and read their page titles, descriptions, and keywords.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
jarun	buku	0 ~ 5.1.1	-

II. Public POCs for CVE-2026-123201

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-123201

请登录查看更多情报信息。

Other References for CVE-2026-123201 (6)

https://github.com/jarun/buku/commit/13f6497afc974f02f1069b760772abe8815d1675 patch
https://github.com/jarun/buku/pull/916 patch issue-tracking
https://github.com/jarun/buku/issues/910 issue-tracking
https://github.com/jarun/buku/blob/e232ac357cbba22fe69d6d6dfc0d35512a4cd313/bukuserver/api.py#L97-L105 technical-description
https://github.com/jarun/buku/blob/e232ac357cbba22fe69d6d6dfc0d35512a4cd313/buku.py#L4057-L4084 technical-description
https://www.vulncheck.com/advisories/buku-through-5.1.1-ssrf-via-bukuserver-fetch-data-and-network-handle-api third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-123201

IV. Related Vulnerabilities

Same product: buku

CVE-2026-121627
buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark Li

Same vendor: jarun

Same weakness: CWE-918