Get real-time updates on Telegram
CVE-2026-72566: automatisch 0 through 41f3c56
CVE-2026-72566. CVSS 3.1 base score 7.7 (HIGH, Source advisory). EPSS 0.00354 (percentile 0.27842), scored 22-Oct-2026.
Affected technology
automatisch · 0 through 41f3c56
automatisch
Description’s affected range: through commit 41f3c56
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
A low-privileged authenticated user with 'manage Flow' permission can make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action. Source advisory’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality impact as high; integrity and availability impact as none.
- CWE
- CWE-918
- CCR priority
- 30.9 /100 (P4)
- CVSS 3.1
- 7.7 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N · Source advisory
- EPSS
- 0.00354 · percentile 0.27842 · 2026-10-22
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-24 01:40:49.068977+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-72566.html