CVE-2026-41172 - Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)
CVE ID :CVE-2026-41172 Published : April 22, 2026, 10:16 p.m. | 1 hour, 24 minutes ago Description :Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, an SSRF vulnerability allows a user with asset upload permission to force the se
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] AI hacking fears rise as South Korea warns of new cyber threat
- [CYBER] CVE-2026-41211 - `vite-plus/binding` has path traversal `downloadPackageManager()` that leads to writes outside of `VP_HOME`
- [CYBER] CVE-2026-5752 — Cohere AI's Terrarium sandbox (used to run LLM-generated code) has a CVSS 9.3 prototype chain escape to root. No patch. Worth discussing the AI infrastructure threat model.
- [CYBER] Tool recommendations for vuln/CVE research
- [CYBER] CVE-2026-41208 - Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution
- [CYBER] CVE-2026-41206 - PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code