CVE-2026-55232Proof of concept (PoC) published · CISA
Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
CVSS score
7.6
EPSS probability
%0.3
Risk score
0.0
Published
11 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.8
CVE-2026-54612
Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global
G
Patch status unknownEPSS %1
8.8
CVE-2026-49228
Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products
G
Patch status unknownEPSS %1
8.8
CVE-2026-49221
Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assets
G
Patch status unknownEPSS %1
8.3
CVE-2026-49224
Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions
G
Patch status unknownEPSS %0
8.3
CVE-2026-49225
Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions
G
Patch status unknownEPSS %0
8.3
CVE-2026-49226
Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' posts
G
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-55232"