CVE-2026-36764: SSRF
Published Apr 30, 2026
·Updated
A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources via a crafted GET request.
Affected Software
1 affected component
SpringBlade SpringBlade=4.8.0
Event History
Apr 30, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-36764?
CVE-2026-36764 has a medium severity rating of 5 on the CVSS scale.
2
What type of vulnerability is CVE-2026-36764?
CVE-2026-36764 is classified as a Server-Side Request Forgery (SSRF) vulnerability.
3
How does CVE-2026-36764 affect SpringBlade?
CVE-2026-36764 allows authenticated attackers to scan internal resources through the /ureport/datasource/testConnection endpoint.
4
Who is affected by CVE-2026-36764?
Any user of SpringBlade v4.8.0 may be affected if they are authenticated.
5
How can I mitigate CVE-2026-36764 in SpringBlade?
To mitigate CVE-2026-36764, it is recommended to upgrade to a patched version of SpringBlade.