VULNERABILITY INTELLIGENCE
CVE-2026-10583
CVSS score4.7 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-02
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Description
A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. Affected by this issue is the function Import of the file internal/http/tts_config.go of the component TTS Configuration Endpoint. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.
Weakness classification
- cna@vuldb.com: CWE-918