SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-86806

HIGH · CVSS 7.3 EPSS 0.45% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in opengeos GeoLibre versions up to 2.3.0 allows for server-side request forgery through manipulation of the _is_within_roots function, which can be exploited remotely. Organizations using this software should prioritize upgrading to version 2.4.0 to mitigate the risk of unauthorized access and potential data breaches. Immediate action is essential for any entity relying on this component to protect their systems from exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86806
Severity
HIGH
CVSS
7.3
EPSS
0.45%

Original NVD Description

A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name: b745f62e29fa37364686525a21eee5e5c0f8a369. It is recommended to upgrade the affected component.