CVE-2026-50775

creationtimestamp| type| source ---|---|--- 2026-08-18 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteyfwbi5y2u...

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly...

CVE-2026-50775

DataHub v1.5.0.1 is vulnerable to a blind SSRF flaw where the server fetches images from attacker-supplied URLs, enabling remote code execution without authentication. CVSS 3.1 scores it CRITICAL (9.8), and CISA's SSVC assessment marks it as automatable with total technical impact. No patch versi...