CVE-2026-19233: SSRF
Published Sep 9, 2026
·Updated
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server data when an attacker with a privileged account sends crafted, unvalidated parameters to a server endpoint.
Event History
Sep 9, 2026
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
DescriptionWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
Exploitation requires a privileged account. The attacker must use that account to send crafted, unvalidated parameters to a server endpoint.
2
What could successful exploitation allow?
Successful exploitation could result in unauthorized command execution and disclosure of server data.