CVE-2026-101048Proof of concept (PoC) published · CISA
Cloudreve before 4.17.0 SSRF via Admin.Read OAuth scope
CVSS score
5.3
EPSS probability
%0.2
Risk score
0.0
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-25726
Vulnerability in Cloudreve
C
Patch status unknownEPSS %1
7.1
CVE-2026-77633
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
C
Patch status unknownEPSS %0
6.5
CVE-2026-79913
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
C
Patch status unknownEPSS %0
6.9
CVE-2026-101056
Cloudreve before 4.16.1 Authentication Bypass via Cached Context Hint
C
Patch status unknownEPSS %0
3.8
CVE-2026-77637
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
C
Patch status unknownEPSS %0
2.3
CVE-2026-101051
Cloudreve before 4.16.1 Path Traversal via Remote Download
C
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-101048"