Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vulnerability in the fetchTitleAndHeaders function allows authenticated users to make arbitrary HTTP requests to internal services due to insufficient URL validation that only checks for "http://" or "https://" prefixes. This issue has been patched in version 2.13.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | Disclosure1Patch1 |
| 2026-05-10 | 1 | Disclosure1 |
| 2026-05-14 | 3 | Disclosure2General1 |
| 2026-06-11 | 3 | Disclosure3 |
44313 is — The Metadata Proxy: Critical SSRF in Linkwarden Lets Authenticated Users Raid Internal Infrastructure. CVE-2026-44313 is a critical server-side request forgery (SSRF) vulnerability in Linkwarden, a popular open-source bookmark manager.
Post summary
The text announces the discovery of a critical SSRF vulnerability (CVE-2026-44313) in Linkwarden, with no additional details on exploitation or mitigation.
CVE-2026-44313 is a critical server-side request forgery (SSRF) vulnerability in Linkwarden, a popular open-source bookmark manager. Authenticated users can force the server to make arbitrary HTTP requests to internal services, potentially exposing cloud metadata…
Post summary
The post announces the existence of a critical SSRF vulnerability in Linkwarden, outlining its impact but providing no PoC, exploit code, or patch information.
Sources TheHackerWire: "Critical SSRF in Linkwarden (CVE-2026-44313)" (May 9, 2026) – TheHackerWire: CVE-2026-44313 Vulnerability Database – CVE-2026-44313 is a critical server-side request forgery (SSRF) vulnerability in Linkwarden, a popular open-source bookmark manager.
Post summary
A critical SSRF vulnerability, CVE‑2026‑44313, has been disclosed in the open‑source Linkwarden bookmark manager, with no PoC, exploit, or patch details provided.
CVSS 9.1 CRITICAL · CVE-2026-44313 · 9.1 → 2.13.0 CVE: CVE-2026-44313 CVSS: 9.1 (3.1) — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Severity: CRITICAL Status: Critical advisory
Post summary
The entry details CVE‑2026‑44313 with a CVSS 9.1 rating and critical severity but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE: CVE-2026-44313 CVSS: 9.1 (3.1) — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Severity: CRITICAL Status: Critical advisory Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages.
Post summary
The snippet announces CVE‑2026‑44313 with a high CVSS score and critical severity, but it offers no PoC, exploit code, or patch details.
https://lyrie.ai/research/research/cve-2026-44313-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided text lacks actionable or detailed information about CVE-2026-44313; it only references a URL and generic hashtags, making it impossible to determine specific aspects of the vulnerability.
⚡ New CVE Alert: CVE-2026-44313 📊 Severity: 9.1 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-44313 #CVE-2026-44313 #CVE #Critical #CyberSecurity #InfoSec https://t.co/4faQ1hMWaG
Post summary
A new CVE‑2026‑44313 is announced with a critical 9.1 score, affecting unspecified products; no further technical, exploit, or patch details are supplied.
CVE-2026-44313 Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forg… https://www.cve.org/CVERecord?id=CVE-2026-44313
Post summary
CVE‑2026‑44313 describes a Server‑Side Request vulnerability in Linkwarden before version 2.13.0, with the patch applied in that version.
CVE-2026-44313 Server-Side Request Forgery in Linkwarden Prior to Versio... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44313 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post references CVE‑2026‑44313, identifies it as a Server‑Side Request Forgery affecting Linkwarden before a certain version, and links to a vulnerability details page; it provides no PoC, exploit, active use, patch, or debunking information.