CVE-2026-39087
SSRF Vulnerability in ntfy Push Endpoint Validation
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
CVSS 3.1 · 6.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products