High · 7.5 CVE-2026-3588 EUVD-2026-10343GHSA-x9w3-4p72-r5rx

Server-Side Request Forgery (SSRF) in ikea dirigera

Published Mar 9, 2026 · Updated Mar 9, 2026 · Assigned by Nozomi

Description

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

Affected products

Vendor	Product	Affected	Fixed
ikea	dirigera	≤ 2.866.4	—

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-3588 third-party-advisory