Description
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.
Critical · 9.8
CVE-2026-50775
EUVD-2026-60351GHSA-f4qf-jj8g-f9qc
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a craft…
Published Aug 17, 2026 · Updated Aug 18, 2026 · Assigned by mitre