CVE-2026-57862
Last modified
CVE-2026-57862 is a high-severity vulnerability rated 8.5/10 on the CVSS scale. Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link creation feature, causing cURL to resolve and connect to internal network resources such as cloud instance metadata services, localhost services, and RFC1918 addresses while the isPrivateURL() filter in app/Core/Http/Client.php incorrectly treats the input as safe due to FILTER_VALIDATE_IP rejecting non-dotted-decimal notation..
Description
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link creation feature, causing cURL to resolve and connect to internal network resources such as cloud instance metadata services, localhost services, and RFC1918 addresses while the isPrivateURL() filter in app/Core/Http/Client.php incorrectly treats the input as safe due to FILTER_VALIDATE_IP rejecting non-dotted-decimal notation.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Kanboard | Kanboard | <= 1.2.52 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-57862?
How severe is CVE-2026-57862?
How do I fix CVE-2026-57862?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-57856Cockpit CMS contains a path traversal vulnerability in the B…8.8
- CVE-2026-57857The Flow Payment plugin for WordPress (flow.cl) version 3.0.…5.1
- CVE-2026-57858Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a store…8.9
- CVE-2026-57859e107 prior to version 2.3.8 contains a code execution vulner…7.7
- CVE-2026-5786An Improper Access Control vulnerability in Ivanti EPMM befo…8.8
- CVE-2026-57860ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI…7.8
- CVE-2026-57867MicroRealEstate allows adversaries to bypass authentication …8.8
- CVE-2026-57868MicroRealEstate is affected by broken object-level access co…7.1
- CVE-2026-57869Broken object-level access controls and the use of a determi…7.1
- CVE-2026-5787An Improper Certificate Validation in Ivanti EPMM before ver…9.1
- CVE-2026-57870Broken object-level access control on the Template API in Mi…5.3
- CVE-2026-57871Relative path traversal vulnerability in MicroRealEstate fil…7.1
Are you affected by CVE-2026-57862?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST