CVE-2026-65558

AffiliateX versions up to 2.3.5 are vulnerable to an unauthenticated Server Side Request Forgery (SSRF) attack, which could allow an attacker to manipulate server requests and potentially access sensitive internal resources. Organizations using this software should prioritize patching or upgrading to mitigate the risk of unauthorized access and data exposure. This vulnerability is particularly relevant for businesses that rely on AffiliateX for affiliate marketing services.