CVE-2026-13150 | Pentestify up to 1.0.x PDF Generation Endpoint /api/reports server-side request forgery

June 24, 2026 Yanac

A vulnerability was found in Pentestify up to 1.0.x. It has been classified as critical. Affected by this issue is some unknown functionality of the file /api/reports of the component PDF Generation Endpoint. This manipulation causes server-side request forgery.

This vulnerability is handled as CVE-2026-13150. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More