CVE-2026-101048 | Cloudreve up to 4.16.9 Admin Node Test Endpoint /api/v4/admin/node/test server-side request forgery

September 27, 2026 Yanac

A vulnerability marked as problematic has been reported in Cloudreve up to 4.16.9. Affected by this issue is some unknown functionality of the file /api/v4/admin/node/test of the component Admin Node Test Endpoint. The manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-101048. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More