CVE-2026-58141

Vendor

Langgenius

Product

dify

CVSS v3.1

7.6 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Weakness

CWE-918

Exposure class

Edge / VPN / firewall, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 37
   CVE NVD 1h ago

   Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and…

   Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due…

   CVSS 7.6 CVE-2026-58141 Langgenius