MEDIUMCVSS 6.5

CVE-2026-88403

CVE-2026-88403 updated by NVD

Modified: 2026-09-24
Sources: nvd

Summary

A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-88403

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.