Squidex

1 CVEs product

Monthly

CVE-2026-24736 CRITICAL POC Act Now

Server-Side Request Forgery (SSRF) vulnerability in Squidex CMS webhook configuration allows authenticated administrators to make requests to internal services by specifying localhost or internal IP addresses as webhook destinations. PoC available.

SSRF Squidex
NVD GitHub
CVSS 3.1
9.1
EPSS
0.1%
CVE-2026-24736
EPSS 0% CVSS 9.1
CRITICAL POC Act Now

Server-Side Request Forgery (SSRF) vulnerability in Squidex CMS webhook configuration allows authenticated administrators to make requests to internal services by specifying localhost or internal IP addresses as webhook destinations. PoC available.

SSRF Squidex
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy