CVE-2026-85614: falha crítica em Openpanel-dev openpanel
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.3%
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL parameter with no private IP filtering or DNS-rebinding protection. Attackers can make the OpenPanel server issue requests to internal services, localhost, and cloud metadata endpoints, reading internal HTTP response titles, headers, status codes, and SSL certificate information.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Produtos afetados
Openpanel-dev · openpanelCVEs relacionadas — Openpanel-dev openpanel
No mesmo produto, das mais perigosas para as menos.
CVE-2026-85610HIGHOpenPanel before 2.3.0 Remote Code Execution via chart formulasEPSS 0.7%CVE-2026-93985CRITICALOpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCEEPSS 0.7%CVE-2026-116817MEDIUMOpenPanel before 3.0.0 Missing Authentication on Worker Bull BoardEPSS 0.6%CVE-2026-85609MEDIUMOpenpanel before 2.3.0 SSRF via Site Checker EndpointEPSS 0.5%CVE-2026-116811HIGHOpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateEPSS 0.5%CVE-2026-88893HIGHOpenPanel through 2.3.0 Unauthenticated Share Lookup Information DisclosureEPSS 0.5%