CVE-2026-50775
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A blind SSRF vulnerability in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code by causing the server to retrieve an image from a crafted URL. The server does not return the content or errors directly, making detection difficult.
Risk Assessment
An attacker can use the server to scan internal networks or perform unauthorized actions, potentially compromising data confidentiality and integrity.
Recommendation
Update DataHub to the latest version if a patch is available. Additionally, restrict server access and filter outbound network requests to prevent SSRF exploitation.
Original NVD description (English source)
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.