CVE-2026-13739

CriticalCVSS 9.8

Published: 11/08/2026(UTC)Updated: 09/09/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.

Risk Assessment

Risk of unauthorized access to internal network resources by an unauthenticated attacker, potentially leading to data leakage or further attacks.

Recommendation

Upgrade Command Center to a patched version. Restrict access to legacy endpoints.

Other vulnerabilities in Command Center

CVE-2026-77089Critical
Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS