CVEvulnerability
CVE-2026-82477
5.8 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-08-29
- Last modified
- 2026-09-01
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
- Weaknesses
- CWE-918
Description
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://github.com/mitre/heimdall2/commit/b6a9cdb4fc01f96aaa1a77cc27d1d449b485937b github.com
- https://github.com/mitre/heimdall2/releases/tag/v2.14.0 github.com
- https://github.com/mitre/heimdall2/security/advisories/GHSA-g9vx-2rpf-gpch github.com
- https://github.com/mitre/heimdall2/security/advisories/GHSA-g9vx-2rpf-gpch github.com