CVE-2026-15143

Katalog CVE

CVSS 9.3 · Critical EPSS 0,43%

Kerentanan Server-Side Request Forgery (SSRF). Skor CVSS 3.1 9.3 (Critical) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Rincian

Terbit di NVD

10 Juli 2026

Terakhir diubah

31 Agustus 2026

Status NVD

Awaiting Analysis

CVSS 3.1

9.3 (Critical), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,7% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-15143
• https://bugzilla.redhat.com/show_bug.cgi?id=2498165