SSRF in Pentestify

CVE-2026-13150

Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to arbitrary internal or…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References