PT-2026-34451 · Guardsix · Logpoint+1

Published 2026-04-22 · Updated 2026-05-12 · CVE-2026-35548

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions guardsix ODBC Enrichment Plugins versions prior to 5.2.1

Description A logic flaw exists where stored database credentials are retained after the target Host, IP address, or Port is modified. When editing an Enrichment Source, the system fails to clear previous credentials despite changes to the connection endpoint. This allows an authenticated Operator user to redirect the database connection to unintended internal systems, leading to Server-Side Request Forgery (SSRF), which is a technique where an attacker forces a server to send requests to an internal or external resource. This could result in the misuse of valid stored credentials.

Recommendations Update to version 5.2.1.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-35548

Affected Products

Logpoint

Odbc

References · 5

• https://servicedesk.guardsix.com/hc/en-us/articles/35555683205021-SSRF-in-ODBC-Enrichment-Source · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35548 · Security Note
• https://t.me/cveNotify/163275 · Telegram Post
• https://twitter.com/CVEnew/status/2048168396584570915 · Twitter Post
• https://guardsix.com/media-room#/pressreleases/logpoint-becomes-guardsix-as-europe-reassesses-sovereign-security-operations-3436974 · Note