CVE-2026-62282Disclosure

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notification channels can trigger requests to hosts reachable from the OpenCVE server, including internal network resources, localhost interfaces, link-local addresses, and cloud metadata services, and retrieve information from reachable HTTP services. This issue is fixed in version 3.0.0.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-09-22); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-22: 1Mentions · 2026-10-14: 1Technical Details · 2026-09-22: 1Technical Details · 2026-10-14: 109-2210-14
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • DailyCVE@dailycve
    Disclosure

    🟠 OpenCVE, Server-Side Request Forgery (SSRF), #CVE-2026-62282 (Medium) -DC-Oct2026-3199 https://dailycve.com/opencve-server-side-request-forgery-ssrf-cve-2026-62282-medium-dc-oct2026-3199/

    Post summary

    The tweet is a brief CVE disclosure from a daily CVE aggregator, announcing CVE-2026-62282 as an SSRF vulnerability with Medium severity, without mentioning any PoC, exploit, patch, or active exploitation.

    0000035
    242 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🟠 OpenCVE, Server-Side Request Forgery (SSRF), #CVE-2026-62282 (Medium) -DC-Sep2026-2512 https://dailycve.com/opencve-server-side-request-forgery-ssrf-cve-2026-62282-medium-dc-sep2026-2512/

    Post summary

    The tweet discloses CVE-2026-62282, an SSRF vulnerability rated Medium, and links to a DailyCVE article for more information without mentioning exploits, patches, or active exploitation.

    0000032
    238 followersView on X

Explore more