CVE-2026-102244 | MODSetter SurfSense up to 0.0.36 Document Export Feature editor_routes.py server-side request forgery

September 28, 2026 Yanac

A vulnerability has been found in MODSetter SurfSense up to 0.0.36 and classified as problematic. Impacted is an unknown function of the file surfsense_backend/app/routes/editor_routes.py of the component Document Export Feature. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-102244. The attack can be initiated remotely. Additionally, an exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More