Skip to content
OpenAdvisories

Vendor

Squidex

11 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-41177 Public exploit

    Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

    Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-s…