CVE-2026-57862

HighCVSS 8.5/10Last modified Jul 31, 2026

Description

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link creation feature, causing cURL to resolve and connect to internal network resources such as cloud instance metadata services, localhost services, and RFC1918 addresses while the isPrivateURL() filter in app/Core/Http/Client.php incorrectly treats the input as safe due to FILTER_VALIDATE_IP rejecting non-dotted-decimal notation.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Jul 30, 2026
Last modified: Jul 31, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-578638.8Crater Invoice through 6.0.6 contains a path traversal vulnerability in the self-update API that allows authenticated company owners to writ CVE-2026-578668.8Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai_genera CVE-2026-578678.8MicroRealEstate allows adversaries to bypass authentication due to a lack of token state management. This would permit adversaries targeting CVE-2026-578687.1MicroRealEstate is affected by broken object-level access controls in PDF generator functionality. This issue affects MicroRealEstate: thro CVE-2026-578697.1Broken object-level access controls and the use of a deterministic pattern during random ID generation in MicroRealEstate allows attackers t CVE-2026-57879.1An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker CVE-2026-578705.3Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other orga CVE-2026-578717.1Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. CVE-2026-578727.5An unauthenticated directory traversal vulnerability exists in get_fcont.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The v CVE-2026-578737.5An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and ea CVE-2026-578747.5An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. Th CVE-2026-578757.5An unauthenticated NULL pointer dereference vulnerability exists in the HTTP request parsing logic of multiple CGI components in GeoVision G