Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-27797 Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the… https://www.cve.org/CVERecord?id=CVE-2026-27797
Post summary
The message announces that Homarr dashboards prior to version 1.54.0 are vulnerable to an unauthenticated SSRF, but provides no PoC, exploit, or evidence of active exploitation.
CVE-2026-27797 Unauthenticated Server-Side Request Forgery in Homarr Dashboard Before 1.54.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27797
Post summary
The entry announces CVE‑2026‑27797 as an unauthenticated SSRF affecting Homarr Dashboard before v1.54.0. It gives the vulnerability type but no PoC, exploit code, active exploitation evidence, or detailed mitigation, only implying the issue is fixed in v1.54.0.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | homarr | homarr | - | - | - |