ProcessWire CMS up to 3.0.255 Add Module module download server-side request forgery 🚫 [False Positive]

Noticeinfo

⚠️ Further analysis revealed that this issues is a false-positive. Please take a look at the sources mentioned and consider not using this entry at all.

Productinfo

Type

• Content Management System

Vendor

• ProcessWire

Name

• CMS

Version

• 3.0.255

Timelineinfo

04/13/2026 CVE reserved
04/16/2026 +3 days Advisory disclosed
04/16/2026 +0 days VulDB entry created
07/11/2026 +86 days VulDB entry last update

Sourcesinfo

Advisory: gist.github.com
False Positive: Yes

CVE: CVE-2026-40500 (🔒)
GCVE (CVE): GCVE-0-2026-40500
GCVE (VulDB): GCVE-100-357848

Entryinfo

Created: 04/16/2026 07:12
Updated: 07/11/2026 12:53
Changes: 04/16/2026 07:12 (77), 07/11/2026 12:53 (3)
Complete: 🔍
Cache ID: 216::103

Submitinfo

Duplicate

• Submit #XXXXXX: Xxxx Xxxxxx ( Xxxxx://xxxxxxxxxxx.xxx/xxxxx/xxxx/xxxx/ ) Xxxxxxxxxxx Xxx X.x.xxx Xxxx ( Xxxxxx-xxxx Xxxxxxx Xxxxxxx ) (by thepiyushkumarshukla)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion

Do you want to use VulDB in your project?

Use the official API to access entries easily!