CVE-2026-39521

MediumCVSS 4.9

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content allows Server Side Request Forgery. This issue affects Nelio Content from n/a through <= 4.3.1.

Risk Assessment

An attacker can make requests from the server to internal network resources, potentially leading to disclosure of sensitive data or further attacks on infrastructure.

Recommendation

Update the Nelio Content plugin to version 4.3.2 or later if available.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Content: from n/a through <= 4.3.1.