CVE-2026-49262

{
  "id": "CVE-2026-49262",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-12T15:17:35.867",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists between the URL validation phase and the actual HTTP request phase, allowing attackers to access internal network resources and cloud metadata endpoints. Version 0.10.4 fixes the issue."
    },
    {
      "lang": "es",
      "value": "En el sistema de gestión de contenidos Aimeos Pagible anterior a la versión 0.10.4, la ruta de proxy administrativa (’cmsproxy’) es vulnerable a un ataque de falsificación de petición del lado del servidor (SSRF) a través de Rebinding de DNS. Existe una condición de carrera de Tiempo de Verificación a Tiempo de Uso (TOCTOU) entre la fase de validación de URL y la fase de petición HTTP real, lo que permite a los atacantes acceder a recursos de red internos y a puntos finales de metadatos en la nube. La versión 0.10.4 corrige el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "aimeos",
          "product": "pagible",
          "versions": [
            {
              "version": "< 0.10.4",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N",
          "baseScore": 3.0,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-12T15:17:21.495595Z",
          "id": "CVE-2026-49262",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-367"
        },
        {
          "lang": "en",
          "value": "CWE-918"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/aimeos/pagible/commit/09a8205d513ec89ed22cdd7bdae0f4c181cee082",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/aimeos/pagible/security/advisories/GHSA-mmj8-wcvw-6789",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}