CVE-2026-11437

A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-918

• https://vuldb.com/cve/CVE-2026-11437
• https://vuldb.com/submit/822726
• https://vuldb.com/vuln/369017
• https://vuldb.com/vuln/369017/cti
• https://www.notion.so/Server-Side-Request-Forgery-SSRF-in-go-fastdfs-web-Installation-Endpoint-35aea92a3c41806485ffeeac7e18126a

Published

Jun 6, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11436A vulnerability was detected in Mage AI up to 0.9.79. This i…4.3
• CVE-2026-114361A vulnerability was detected in HarnessRouter up to 0.31.10.…5.6
• CVE-2026-114362A flaw has been found in HarnessRouter up to 0.31.12. This i…6.3
• CVE-2026-114364Improper neutralization of special elements used in an SQL c…9.8
• CVE-2026-114366An information disclosure vulnerability in the Qt Framework …2.3
• CVE-2026-114369Resource exhaustion vulnerability in the Qt Framework QWebSo…2.7
• CVE-2026-114370A flaw was found in the PathResourceManager component of the…3.7
• CVE-2026-114371Adobe Experience Manager is affected by an Incorrect Authori…9.9
• CVE-2026-114372Adobe Experience Manager is affected by a stored Cross-Site …5.4
• CVE-2026-114373Photoshop Desktop is affected by a Divide By Zero vulnerabil…5.5
• CVE-2026-114374A vulnerability was identified in leomoon-studios wiki-go up…4.3
• CVE-2026-114375A security flaw has been discovered in leomoon-studios wiki-…6.3