Description
An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request.
High · 8.1
CVE-2026-79425
EUVD-2026-78625GHSA-fwp6-82jc-56pc
An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component of CRMEB v6.0.0 allows attackers to scan …
Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by mitre