OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-102145

MEDIUM · CVSS 6.6 EPSS 0.28% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

An authenticated administrator can exploit this vulnerability to make the server send requests to internal network services that should not be accessible through the exposed interface. While this does not lead to direct code execution, it could facilitate further attacks or data exposure within the internal network. Organizations with systems allowing administrative access should prioritize addressing this vulnerability to mitigate potential risks to their internal services.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
code execution
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-102145
Severity
MEDIUM
CVSS
6.6
EPSS
0.28%

Original NVD Description

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)