CVE-2026-9557 in Mauticinformation

Résumé

par MITRE • 29/05/2026

A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbound HTTP requests from the hosting server, enabling internal network reconnaissance or forcing requests to arbitrary internal or external destinations.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Mautic

Réserver

26/05/2026

Divulgation

29/05/2026

Modérer

accepté

Entrée

VDB-367171

CPE

prêt

EPSS

0.00025

KEV

non

Activités

faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-9557
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-9557
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-9557/

◂ PrécédentAperçuSuivant ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!