CVE-2026-82801 | NASA earthdata-search 1.0.0 scale Endpoint handler.js scaleImage server-side request forgery

SecurityVulns
Yanac

A vulnerability classified as critical has been found in NASA earthdata-search 1.0.0. Affected by this vulnerability is the function scaleImage of the file serverless/src/scaleImage/handler.js of the component scale Endpoint. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-82801. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More