{"id":"CVE-2026-92566","title":"DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP requests by supplying a caller-controlled URI","summary":"DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP requests by supplying a caller-controlled URI. Attackers ca…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-918"],"vendor":"datageartech","product":"datagear","affected":["datagear <= 6.0.0"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T16:17:23.267","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92566","references":[{"url":"https://github.com/datageartech/datagear","label":"disclosure@vulncheck.com"},{"url":"https://github.com/datageartech/datagear/blob/fedefd4269b123e1e4f3e029906ed6e6f378c989/datagear-analysis/src/main/java/org/datagear/analysis/support/HttpDataSet.java#L386-L392","label":"disclosure@vulncheck.com"},{"url":"https://github.com/datageartech/datagear/blob/fedefd4269b123e1e4f3e029906ed6e6f378c989/datagear-web/src/main/java/org/datagear/web/config/CoreConfigSupport.java#L386-L390","label":"disclosure@vulncheck.com"},{"url":"https://github.com/datageartech/datagear/blob/fedefd4269b123e1e4f3e029906ed6e6f378c989/datagear-web/src/main/java/org/datagear/web/config/SecurityConfigSupport.java#L449-L453","label":"disclosure@vulncheck.com"},{"url":"https://github.com/datageartech/datagear/issues/37","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/datagear-through-6.0.0-unauthenticated-ssrf-via-http-dataset-preview","label":"disclosure@vulncheck.com"},{"url":"https://github.com/datageartech/datagear/issues/37","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-16T15:39:50.088494Z"},"ingestedAt":"2026-09-16T14:57:28.040Z","epss":0.00488,"epssPercentile":0.40928,"slug":"CVE-2026-92566","body":"## Overview\n\nDataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP requests by supplying a caller-controlled URI. Attackers can issue GET, POST, PUT, PATCH, or DELETE requests to internal endpoints and cloud metadata services, receiving full response bodies without authentication or validation.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":57,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":205346,"id":"CVE-2026-92566","ts":1789574377852,"field":"exploit_available","old":"false","new":"true"}]}