CVE-2026-82285 | dataelement Bisheng up to 2.6.0-fix2 Callback Endpoint callback server-side request forgery

August 28, 2026 Yanac

A vulnerability was found in dataelement Bisheng up to 2.6.0-fix2. It has been declared as critical. The impacted element is an unknown function of the file /api/v1/workflow/report/callback of the component Callback Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-82285. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More