CVE-2026-114362

The HarnessRouter software (versions up to 0.31.12 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the Targets Test Endpoint component. Specifically, a flaw in an unknown function of the gateway/app.py file allows an attacker to perform a remote manipulation of the base_url a...

EUVD-2026-107502

A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation of the argument baseurl can lead to server-side request forgery. The attack may be performed from remote. Upgrading to...

CVE-2026-114361

A vulnerability exists in HarnessRouter up to version 0.31.10 within the Identity Mode component, specifically affecting an unknown function in the gateway/app.py file. By manipulating the X-Harness-Org/X-Harness-Member argument, an attacker can achieve improper authorization via a remote attack....

EUVD-2026-107496

A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation of the argument X-Harness-Org/X-Harness-Member results in improper authorization. The attack is possible to be carried...