Beveiligingsadvies

CVE-2026-86119

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-05 09:59:08

Laatst bijgewerkt 2026-09-05 09:59:08

Toegewezen door VulnCheck

CVSS-score 9.2

Status PUBLISHED

Beschrijving

Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints to read cloud instance metadata, access internal services, and perform network reconnaissance on the instance infrastructure.

← Alle CVE's bekijken Bekijk op cve.org ↗