CVE-2026-76177
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory server to make HTTP/HTTPS requests to external systems or internal resources, which could allow access to internal network services or metadata resources of cloud services.
Risk Assessment
Risk of unauthorized access to internal network resources and cloud metadata, potentially leading to sensitive information disclosure and further attacks.
Recommendation
Upgrade OCS Inventory to a patched version, restrict operator privileges, and validate input parameters.
Other vulnerabilities in OCS Inventory
See all- CVE-2026-76176High
SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed by the application and retrieve information stored in the database.
- CVE-2026-76175High
SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and information to be extracted from the database using SQL injection techniques.
- CVE-2021-46355Medium
OCS Inventory 2.9.1 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. An attacker can exploit this by manipulating the name of a device (e.g., a printer) on the victim's computer, replacing it with malicious code.
Original NVD description (English source)
Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory server to make HTTP/HTTPS requests to external systems or internal resources, which could allow access to internal network services or metadata resources of cloud services.