CVE-2026-66654

MediumCVSS 6.0

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Subscriber-level Server Side Request Forgery (SSRF) vulnerability in Vehica Core plugin versions up to and including 1.0.104.

A subscriber can make the server send requests to internal resources, potentially leading to information disclosure or attacks on internal services.

Update the Vehica Core plugin to a version newer than 1.0.104.

Original NVD description (English source)

Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.