What is the CVSS score of CVE-2026-28295?

CVE-2026-28295 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Red Hat are affected by CVE-2026-28295?

Organizations using A flaw should be aware of moderate risk from CVE-2026-28295, a server-side request forgery vulnerability rated CVSS 4.3. Users could be tricked into performing unintended actions.. A patch is available.

How to fix or mitigate CVE-2026-28295?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Red Hat CVE-2026-28295

MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-02-26 secalert@redhat.com

SSRF Red Hat Suse

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SUSE

MEDIUM

qualitative

Red Hat

4.3 LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 23, 2026 - 14:00 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 26, 2026 - 16:24 nvd

MEDIUM 4.3

DescriptionCVE.org

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

AnalysisAI

GVfs FTP backend clients blindly trust server-provided IP addresses and ports during passive mode connections, enabling malicious FTP servers to conduct network reconnaissance and probe for open ports from the client's network perspective. The vulnerability requires user interaction but poses a confidentiality risk to network topology information. A patch is available to address this trust validation issue.

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network.

Affected ProductsAI

the FTP GVfs backend

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

View all

CVE-2021-34473 CRITICAL POC

9.1

CVE-2021-26855 CRITICAL POC

9.1

CVE-2022-41040 HIGH POC

8.8

CVE-2024-21893 HIGH POC

8.2

CVE-2023-48022 CRITICAL POC

9.8

CVE-2016-3718 MEDIUM POC

5.5

CVE-2015-8813 HIGH POC

8.2

CVE-2020-24881 CRITICAL POC

9.8

Same technique SSRF

View all

CVE-2016-3718 MEDIUM POC

5.5

CVE-2015-8813 HIGH POC

8.2

CVE-2020-24881 CRITICAL POC

9.8

CVE-2026-15409 CRITICAL POC

10.0

CVE-2024-54385 HIGH POC

7.2

CVE-2022-45835 MEDIUM POC

5.8

CVE-2024-54330 HIGH POC

7.2

CVE-2026-20230 HIGH POC

8.6

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.85	Affected
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.53 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.76 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.85 Container suse/sl-micro/6.0/toolbox:13.2-9.35 Container suse/sl-micro/6.1/baremetal-os-container:2.2.0-3.1 Container suse/sl-micro/6.1/base-os-container:2.2.0-3.1 Container suse/sl-micro/6.1/kvm-os-container:2.2.0-3.1 Container suse/sl-micro/6.1/rt-os-container:2.2.0-3.1	Affected
Image SL-Micro Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2	Affected
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP7 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed

CVE-2026-28295 vulnerability details – vuln.today

Back

Red Hat CVE-2026-28295

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Same weakness CWE-918 – Server-Side Request Forgery (SSRF)

Same technique SSRF

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code