CVE-2026-82040 | UTMStack up to 11.2.15 metadata /api/identity-providers IdentityProviderService.validateMetadataUrl server-side request forgery

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in UTMStack up to 11.2.15. Impacted is the function IdentityProviderService.validateMetadataUrl of the file /api/identity-providers of the component metadata Handler. The manipulation results in server-side request forgery.

This vulnerability is known as CVE-2026-82040. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More