CVE-2026-114362 in HarnessRouterالمعلومات

الملخص

بحسب MITRE • 21/10/2026

A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument base_url can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 0.31.13 will fix this issue. This patch is called 1c4b1fc1f89737dabd089ac1d1c174a57f764e28. It is suggested to upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

مسؤول

VulDB

إفشاء

21/10/2026

الاعتدال

تمت الموافقة

إدخال

VDB-424709

EPSS

0.00000

KEV

لا

النشاطات

منخفض

المصادر

Interested in the pricing of exploits?

See the underground prices here!