Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2026-9557

A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mautic

Description

A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbound HTTP requests from the hosting server, enabling internal network reconnaissance or forcing requests to arbitrary internal or external destinations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mautic/core

Default version status: unaffected

  • 4.0.0 to < 4.4.20affected
  • 5.0.0 to < 5.2.11affected
  • 6.0.0 to < 6.0.9affected
  • 7.0.0 to < 7.1.2affected

References