CVE-2026-49262

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-49262", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-28T14:33:01.180Z", "datePublished": "2026-08-12T14:04:09.179Z", "dateUpdated": "2026-08-12T15:18:40.461Z"}, "containers": {"cna": {"title": "Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy", "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "lang": "en", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789"}, {"name": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082", "tags": ["x_refsource_MISC"], "url": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082"}], "affected": [{"vendor": "aimeos", "product": "pagible", "versions": [{"version": "< 0.10.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-12T14:04:09.179Z"}, "descriptions": [{"lang": "en", "value": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists between the URL validation phase and the actual HTTP request phase, allowing attackers to access internal network resources and cloud metadata endpoints. Version 0.10.4 fixes the issue."}], "source": {"advisory": "GHSA-mmj8-wcvw-6789", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-12T15:17:21.495595Z", "id": "CVE-2026-49262", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T15:18:40.461Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-49262", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-28T14:33:01.180Z", "datePublished": "2026-08-12T14:04:09.179Z", "dateUpdated": "2026-08-12T15:18:40.461Z"}, "containers": {"cna": {"title": "Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy", "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "lang": "en", "description": "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789"}, {"name": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082", "tags": ["x_refsource_MISC"], "url": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082"}], "affected": [{"vendor": "aimeos", "product": "pagible", "versions": [{"version": "< 0.10.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-12T14:04:09.179Z"}, "descriptions": [{"lang": "en", "value": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists between the URL validation phase and the actual HTTP request phase, allowing attackers to access internal network resources and cloud metadata endpoints. Version 0.10.4 fixes the issue."}], "source": {"advisory": "GHSA-mmj8-wcvw-6789", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-49262", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-12T15:17:21.495595Z"}}}], "references": [{"url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-12T15:17:29.265Z"}}]}}

{"affected": [{"affectedData": [{"product": "pagible", "vendor": "aimeos", "versions": [{"status": "affected", "version": "< 0.10.4"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists between the URL validation phase and the actual HTTP request phase, allowing attackers to access internal network resources and cloud metadata endpoints. Version 0.10.4 fixes the issue."}, {"lang": "es", "value": "En el sistema de gesti\u00f3n de contenidos Aimeos Pagible anterior a la versi\u00f3n 0.10.4, la ruta de proxy administrativa (\u2019cmsproxy\u2019) es vulnerable a un ataque de falsificaci\u00f3n de petici\u00f3n del lado del servidor (SSRF) a trav\u00e9s de Rebinding de DNS. Existe una condici\u00f3n de carrera de Tiempo de Verificaci\u00f3n a Tiempo de Uso (TOCTOU) entre la fase de validaci\u00f3n de URL y la fase de petici\u00f3n HTTP real, lo que permite a los atacantes acceder a recursos de red internos y a puntos finales de metadatos en la nube. La versi\u00f3n 0.10.4 corrige el problema."}], "id": "CVE-2026-49262", "lastModified": "2026-10-24T16:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.0, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-49262", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-12T15:17:21.495595Z", "version": "2.0.3"}}]}, "published": "2026-08-12T15:17:35.867", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082"}, {"source": "security-advisories@github.com", "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-367"}, {"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.10.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "pagible", "source": "cna", "vendor": "aimeos"}, "product": "pagible", "vendor": "aimeos"}], "created": "2026-08-13T00:30:06.005331+00:00", "updated": "2026-08-13T09:48:40.926130+00:00", "vendors": ["aimeos", "aimeos$PRODUCT$pagible"]}