CVE-2026-73087 | amir20 Dozzle up to 10.6.14 SSRF Guard webhook.go isBlockedIP server-side request forgery

A vulnerability was found in amir20 Dozzle up to 10.6.14. It has been declared as critical. The affected element is the function isBlockedIP of the file internal/notification/dispatcher/webhook.go of the component SSRF Guard. Such manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-73087. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.