CVE-2026-85609 | Openpanel-dev Openpanel up to 2.2.x Site Checker tools.controller.ts fetchWithRedirects url server-side request forgery

September 4, 2026 Yanac

A vulnerability described as problematic has been identified in Openpanel-dev Openpanel up to 2.2.x. This affects the function fetchWithRedirects of the file apps/api/src/controllers/tools.controller.ts of the component Site Checker. Such manipulation of the argument url leads to server-side request forgery.

This vulnerability is traded as CVE-2026-85609. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More