CVE-2026-73410 | Budibase up to 3.39.x Rest Integration outboundFetch.ts dns rebinding

August 17, 2026 Yanac

A vulnerability classified as critical was found in Budibase up to 3.39.x. Affected is an unknown function of the file packages/backend-core/src/utils/outboundFetch.ts of the component Rest Integration. Such manipulation leads to reliance on reverse dns resolution.

This vulnerability is uniquely identified as CVE-2026-73410. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More