CVE-2026-62282

MediumCVSS 6.5

Published: 18/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

A vulnerability in OpenCVE before 3.0.0 allows an authenticated user with permission to configure notification channels to trigger requests to arbitrary hosts, including internal network resources, localhost, link-local addresses, and cloud metadata services. The notification testing for Webhook and Slack does not sufficiently validate destination URLs, potentially leaking information.

Risk Assessment

An attacker could use this flaw to scan internal networks, read data from services on the OpenCVE server, or even access cloud metadata, posing severe confidentiality and infrastructure security risks.

Recommendation

Upgrade OpenCVE to version 3.0.0, which fixes the issue. Restrict notification configuration permissions and monitor outbound traffic.

Other vulnerabilities in OpenCVE

CVE-2026-92764Medium
OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token's organization, instead returning the token creator's memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.

Original NVD description (English source)

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can trigger requests to hosts reachable from the OpenCVE server, including internal network resources, localhost interfaces, link-local addresses, and cloud metadata services, and retrieve information from reachable HTTP services. This issue is fixed in version 3.0.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS