P5 Verified

UTMStack < 11.2.16 SSRF via IdentityProviderService

CVE-2026-82040. EPSS 0.00193 (percentile 0.08089), scored 2026-10-03. Fixed version: a310ff00d4f699cf0ae687573f43b69ad9906cdb. Fixed version: 4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd.

Summary source: template

CVE / CWE

CVE-2026-82040 /

Vendor / product

Unavailable / Unavailable

Severity

0.0

CVSS

Unavailable · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N · osv

EPSS

0.00193 · percentile 0.08089 · 2026-10-03

KEV

no · added unavailable · due unavailable · ransomware use unavailable

Exploit signals

Signal evidence

Affected products

• Product unavailable · Fixed version: a310ff00d4f699cf0ae687573f43b69ad9906cdb
• Product unavailable · Fixed version: 4e7a727c3b8d8e2ad020d3b4f982a6d085dbecdd

Provenance

• OSV.dev · Source record · observed 2026-10-04 08:10:59.885464+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-82040.html