CVE-2026-82044 | UTMStack up to 11.2.15 PdfService /api/generate-pdf-report PdfService.downloadPdf url server-side request forgery

October 2, 2026 Yanac

A vulnerability was found in UTMStack up to 11.2.15 and classified as problematic. This affects the function PdfService.downloadPdf of the file /api/generate-pdf-report of the component PdfService. Such manipulation of the argument url leads to server-side request forgery.

This vulnerability is listed as CVE-2026-82044. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More