https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:33:14.624803+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-85614 CVE-2026-85614 — OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker 2026-10-08T09:33:14.642362+00:00

Affected: Openpanel-dev openpanel

OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL parameter with no private IP filtering or DNS-rebinding protection. Attackers can make the OpenPanel server issue requests to internal services, localhost, and cloud metadata endpoints, reading internal HTTP response titles, headers, status codes, and SSL certificate information.