Squidex
1 CVEs
product
Monthly
Server-Side Request Forgery (SSRF) vulnerability in Squidex CMS webhook configuration allows authenticated administrators to make requests to internal services by specifying localhost or internal IP addresses as webhook destinations. PoC available.
SSRF
Squidex
NVD
GitHub
CVSS 3.1
9.1
EPSS
0.1%
CVE-2026-24736
EPSS 0%
CVSS 9.1
CRITICAL
POC
Act Now
Server-Side Request Forgery (SSRF) vulnerability in Squidex CMS webhook configuration allows authenticated administrators to make requests to internal services by specifying localhost or internal IP addresses as webhook destinations. PoC available.
SSRF
Squidex
NVD
GitHub