Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-06 | 1 | Disclosure1 |
| 2026-06-07 | 1 | Disclosure1 |
| 2026-06-08 | 1 | Patch1 |
CVE-2026-11437 A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function checkServer of the file /install/checkServer of the component Installation Endpo… https://www.cve.org/CVERecord?id=CVE-2026-11437
Post summary
A vulnerability was disclosed in perfree go-fastdfs-web versions up to 1.3.7, affecting the checkServer function; no PoC, exploit, or patch details are provided.
CVE-2026-11437 - Server-Side Request Forgery in Perfree go-fastdfs-web <=1.3.7. Remote exploitation via /install/checkServer. CVSS 7.3. No patch available from vendor. Mitigate immediately. #CVE #infosec #Perfree #CVEAlert We have our patch available https://www.valtersit.com/cve/CVE-2026-11437
Post summary
CVE-2026‑11437 is a server‑side request forgery affecting Perfree go‑fastdfs‑web (≤1.3.7), exploitable via /install/checkServer with a CVSS score of 7.3; although no vendor patch exists, the authors provide an alternative fix at the given URL.
CVE-2026-11437 Server-Side Request Forgery in perfree go-fastdfs-web up to 1.3.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11437 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
Disclosed a Server‑Side Request Forgery (SSRF) vulnerability in perfree go‑fastdfs‑web version 1.3.7 or earlier (CVE‑2026‑11437) with no evident exploit, patch, or active exploitation mentioned.