← Database

CVE-2026-82477

MEDIUM CVSS: 5.8 Published: 2026-08-29 Modified: 2026-09-01

Description

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.

Affected Platforms

Unknown

Weakness Type

CWE-918

References