EUVD-2026-25232
GHSA-pqhx-w72w-m393
Severity by source
Sources disagree (Medium–Critical)AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
SSRF via web push endpoint requires authenticated low-privilege user (PR:L); scope changes to internal network (S:C); confidentiality impact only (C:L), no integrity or availability impact confirmed.
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorVendor: mitre
Lifecycle Timeline
8DescriptionCVE.org
An issue in Ntfy ntfy.sh before v.2.21 allows a remote attacker to execute arbitrary code via the parseActions function
AnalysisAI
Server-Side Request Forgery (SSRF) in ntfy (ntfy.sh) before v2.22.0 allows authenticated remote attackers to make the server issue arbitrary HTTP requests to internal network resources by exploiting an unanchored regex pattern in the web push endpoint allow-list. Despite the CVE description attributing the vulnerability to the 'parseActions' function with an RCE classification, the confirmed fix in v2.22.0 - tightening the web push endpoint allow-list regex to prevent SSRF via unanchored pattern matching - indicates the real impact is SSRF, not arbitrary code execution. No active exploitation has been confirmed (not in CISA KEV), though a public proof-of-concept gist exists from the reporter.
Technical ContextAI
ntfy is an open-source HTTP-based notification service (ntfy.sh). The vulnerability resides in the web push endpoint registration flow, where the server validates subscriber-supplied push endpoint URLs against an allow-list enforced by a regular expression. Because the regex was not anchored (missing start/end anchors such as ^ and $), an attacker could supply a crafted URL containing the allowed pattern as a substring - e.g., embedding the trusted domain mid-URL - bypassing the filter while directing the server to make outbound HTTP requests to arbitrary destinations including internal network services. CWE-94 (Code Injection) appears to be a mislabeling by MITRE; the root cause is more accurately CWE-918 (Server-Side Request Forgery) or CWE-185 (Incorrect Regular Expression). The CVSS vector provided (S:C, C:L/I:L) aligns with SSRF semantics rather than full RCE, reinforcing the release-note-confirmed interpretation.
RemediationAI
Upgrade ntfy to v2.22.0 or later, which tightens the web push endpoint allow-list regex to use anchored pattern matching, closing the SSRF bypass. The patched release is available at https://github.com/binwiederhier/ntfy/releases/tag/v2.22.0. As a compensating control for deployments that cannot immediately upgrade, operators should disable web push functionality (if configurable) or restrict the ntfy server's outbound network access via egress firewall rules to prevent it from reaching internal services - note this may break legitimate push notification delivery to external services. Restricting which users can register web push endpoints (if access control permits) further reduces the attack surface. The vendor advisory is referenced via GHSA-w9hq-5jg7-q4j7.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-94 – Code Injection
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today