SSRF in Squidex

CVE-2026-41170

Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the `RestoreController.PostRestoreJob` endpoint allows an administrator to supply an arbitrary URL for downloading backup arc…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (14.9th percentile) — read the EPSS interpretation.