{"id":"CVE-2026-82044","title":"UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.download…","summary":"UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.download…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-918"],"vendor":"UTMStack","product":"UTMStack","affected":["UTMStack < 11.2.16"],"published":"2026-10-02","updated":"2026-10-02","sourceUpdated":"2026-10-02T21:16:56.933","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82044","references":[{"url":"https://github.com/UTMStack/UTMStack/releases/tag/v11.2.16","label":"disclosure@vulncheck.com"},{"url":"https://github.com/utmstack/UTMStack/commit/4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/utmstack-server-side-request-forgery-via-downloadpdf","label":"disclosure@vulncheck.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-02T22:33:09.847Z","slug":"CVE-2026-82044","body":"## Overview\n\nUTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplying an unvalidated url parameter to the PdfService.downloadPdf() method exposed via GET /api/generate-pdf-report. Attackers can leverage this to force the web-pdf microservice to fetch internal backend endpoints, the OpenSearch cluster, or the cloud instance-metadata service, exposing sensitive internal data rendered into the returned PDF.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}