CyberRota
Back to database

CVE-2026-44313

CRITICAL · CVSS 9.1 EPSS 0.01% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-09 · Last synced: 2026-06-08

CyberRota Analysis

Saldırganın giriş yapmış olması gerekebilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-44313
Severity
CRITICAL
CVSS
9.1
EPSS
0.01%

Original NVD Description

Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vulnerability in the fetchTitleAndHeaders function allows authenticated users to make arbitrary HTTP requests to internal services due to insufficient URL validation that only checks for "http://" or "https://" prefixes. This issue has been patched in version 2.13.0.