CVE-2026-39695

MediumCVSS 5.4

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery. This issue affects Podigee: from n/a through <= 1.4.0.

Risk Assessment

The risk is the possibility of scanning internal networks, accessing internal services or data, and potentially escalating attacks to other systems in the internal network.

Recommendation

It is recommended to update the Podigee plugin to a version newer than 1.4.0, which contains a fix for this vulnerability.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in podigee Podigee podigee allows Server Side Request Forgery.This issue affects Podigee: from n/a through <= 1.4.0.