SecureDrop Client

Platform

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

August 22, 2026

Last Seen

August 22, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

CVE-2026-49996: SecureDrop Client Vulnerability Allows Cross-Origin Redirects

Aug 22·1 sources

Related Articles (2)

CVE-2026-49996: securedrop-proxy origin limitation can be bypassed with redirects [LOW] CVSS 3.7 Exploit Intelligence - Recent CVEs / 1d SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. Prior to version 1.3.1, a malicious SecureDrop Server could bypass securedrop-proxy's origin limitation by responding with cross-origin redirects. SecureDrop Server itself has multiple layers of built-in hardening, and is

exploit-intel.com·Aug 22

CVE-2026-49996 - Exploits & Severity

Related Entities

Zero-day Exploit CVE-2026-49996 SecureDrop Workstation SecureDrop Server Tor Tor Hidden Services SSH