Skip to content

CVE-2026-115810

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 23, 2026
Last Seen
October 23, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A server-side request forgery (SSRF) vulnerability, identified as CVE-2026-115810, has been disclosed in TandoorRecipes versions before 2.7.0. This flaw allows authenticated low-privileged users to craft malicious image URLs in Pestle JSON import files, enabling the server to issue GET requests to a...

Public Exploits

Checking GitHub for proof-of-concept code…