CVE-2026-123204informazioni

Riassunto

di MITRE • 05/11/2026

Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit rights to make the backend send POST requests to internal destinations by creating webhooks with arbitrary URLs. Attackers can target loopback, private-network or cloud metadata addresses and read delivery status codes and error strings to probe internal hosts and ports.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Divulgazione

05/11/2026

Moderazione

in revisione

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-123204
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-123204
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-123204/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!