VULNERABILITY INTELLIGENCE
CVE-2026-82477
CVSS score5.8 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2026-08-29
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Description
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.
Weakness classification
- cve@mitre.org: CWE-918