PT-2026-34563 · Squidex · Squidex

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-41170

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Squidex versions prior to 7.23.0

Description The RestoreController.PostRestoreJob endpoint allows an administrator to provide an arbitrary URL for downloading backup archives. This URL is processed by the HttpClient without Server-Side Request Forgery (SSRF) protection, which is a flaw where a server is tricked into making requests to an unintended location. An authenticated administrator can exploit this to probe internal network services, access cloud metadata endpoints, or conduct internal reconnaissance.

Recommendations Update to version 7.23.0.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-41170

Affected Products

Squidex

References · 4

• 🔥 https://github.com/Squidex/squidex/security/advisories/GHSA-6q6m-7h5j-jq4g · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-41170 · Security Note
• https://github.com/Squidex/squidex/commit/b81d75e1d9c1a8e30993c2ee59b350002b9aeda4 · Note
• https://twitter.com/CVEnew/status/2047359935957148094 · Twitter Post