← Vulnerability feed

Vulnerability record · CVE-2026-28508 · published 6 March 2026

CVE-2026-28508: Withknown known server-side request forgery (ssrf) vulnerability

Withknown · Known

Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence of a login requirement on the endpoint itself, this allows an attacker to force the server to make arbitrary outbound HTTP requests to any host, including internal network addresses and cloud instance metadata services, and retrieve the response content. This issue has been patched in version 1.6.4.

9.2 CVSS 4.0 Critical EPSS 0.72% · top 47.9% CWE-918 · Server-side request forgery (SSRF)
9.2CVSS 4.0 base score
0.72%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence of a login requirement on the endpoint itself, this allows an attacker to force the server to make arbitrary outbound HTTP requests to any host, including internal network addresses and cloud instance metadata services, and retrieve the response content. This issue has been patched in version 1.6.4.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/idno/idno/releases/tag/1.6.4 ProductRelease Notes
https://github.com/idno/idno/security/advisories/GHSA-fcrh-fqxh-6fx6 ExploitMitigationVendor Advisory

Track CVE-2026-28508 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-26273Withknown known information exposure vulnerabilityKnown is a social publishing platform. Prior to 1.6.3, a Critical Broken Authentication vulnerability exists in Known 1.6.2 and earlier. The applicat…EPSS 1.2%8.8CVE-2022-33011Withknown known injection vulnerabilityKnown v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.EPSS 1.5%8.6CVE-2026-28507Withknown known os command injection vulnerabilityIdno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and templa…EPSS 0.92%6.1CVE-2022-32115Withknown known cross-site scripting vulnerabilityAn issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.EPSS 1.4%5.4CVE-2022-31290Withknown known cross-site scripting vulnerabilityA cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a c…EPSS 0.86%4.3CVE-2022-30852Withknown known insecure direct object reference vulnerabilityKnown v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).EPSS 0.95%10.0CVE-2026-83548SonicWall SMA1000 pre-auth SSRF via alternate access pathThe SMA1000 Appliance Work Place interface exposes an unintended alternate access path that allows server-side request forgery before authentication.…KEVEPSS 8.8%analysed10.0CVE-2026-49869Kestra OSS auth bypass via path suffix match enables RCEKestra OSS AuthenticationFilter whitelists the public config endpoint using request.getPath().endsWith("/configs"), a suffix match instead of an exac…KEVEPSS 2.1%analysed

Source: NIST National Vulnerability Database (record CVE-2026-28508), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.