PT-2026-8343 · Cskefu · Cskefu

Xcxr · Published 2026-02-16 · Updated 2026-02-20 · CVE-2026-2556

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions cskefu versions up to 8.0.1

Description A security issue exists in cskefu that allows for server-side request forgery. The problem is related to the processing of the file com/cskefu/cc/controller/resource/MediaController.java within the Endpoint component. Manipulating the url argument can trigger the issue. The attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Versions prior to 8.0.1 should be updated.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-2556

Affected Products

Cskefu

References · 8

• 🔥 https://fx4tqqfvdw4.feishu.cn/docx/Vrs6dRx79ondtCxldz2cvupdnMe · Exploit
• https://osv.dev/vulnerability/CVE-2026-2556 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2556 · Security Note
• https://vuldb.com/?ctiid.346164 · Note
• https://vuldb.com/?submit.750708 · Note
• https://t.me/CVEtracker/44822 · Telegram Post
• https://t.me/cveNotify/152629 · Telegram Post
• https://vuldb.com/?id.346164 · Note