PT-2026-34564 · Squidex · Squidex

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-41171

NVD

CVSS v4.0

7.3

High

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Squidex is an open source headless content management system and content management hub. Versions prior to 7.23.0 have a Server-Side Request Forgery (SSRF) vulnerability due to missing SSRF protection on the Jint HTTP client used by scripting engine functions (getJSON, request, etc.). An authenticated user with low privileges (e.g., schema editing permissions) can force the server to make arbitrary outbound HTTP requests to attacker-controlled or internal endpoints. This allows access to internal services and cloud metadata endpoints (e.g., IMDS), potentially leading to credential exposure and lateral movement. Version 7.23.0 contains a fix.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-41171

Affected Products

Squidex

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-41171 · Security Note
• https://github.com/Squidex/squidex/commit/b81d75e1d9c1a8e30993c2ee59b350002b9aeda4 · Note
• https://github.com/Squidex/squidex/security/advisories/GHSA-4m22-gvqm-jv97 · Note