CVE-2026-41177

Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-supplied `Url` parameter, allowing the use of the `file://` protocol. This allows an authenticated administrator to force the backend server to interact with the local filesystem, which can lead to Local File Interaction (LFI) and potential disclosure of sensitive system information through side-channel analysis of internal logs. Version 7.23.0 contains a fix.

• CWE-73
• CWE-918

• https://github.com/Squidex/squidex/commit/b81d75e1d9c1a8e30993c2ee59b350002b9aeda4
• https://github.com/Squidex/squidex/security/advisories/GHSA-45fq-w37p-qfw5
• https://github.com/Squidex/squidex/security/advisories/GHSA-45fq-w37p-qfw5

Published

Apr 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41171Squidex is an open source headless content management system…7.3
• CVE-2026-41172Squidex is an open source headless content management system…7.3
• CVE-2026-41173The AWS X-Ray Remote Sampler package provides a sampler whic…5.9
• CVE-2026-41174Traefik is an HTTP reverse proxy and load balancer. Prior to…6.4
• CVE-2026-41175Statamic is a Laravel and Git powered content management sys…8.1
• CVE-2026-41176Rclone is a command-line program to sync files and directori…9.8
• CVE-2026-41178OpenTelemetry-Go is the Go implementation of OpenTelemetry. …5.3
• CVE-2026-41179Rclone is a command-line program to sync files and directori…9.8
• CVE-2026-4118The Call To Action Plugin plugin for WordPress is vulnerable…4.3
• CVE-2026-41180PsiTransfer is an open source, self-hosted file sharing solu…7.5
• CVE-2026-41181Traefik is an HTTP reverse proxy and load balancer. Prior to…5.8
• CVE-2026-41182LangSmith Client SDKs provide SDK's for interacting with the…5.3