Is CVE-2026-41177 actively exploited?

No active exploitation of CVE-2026-41177 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-41177 be exploited remotely?

Yes. CVE-2026-41177 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-41177?

CVE-2026-41177 has a CVSS score of 5.5 (MEDIUM).

HOME VULNERABILITIESCVE-2026-41177

MEDIUM

CVE-2026-41177

CWE-73Published: April 22, 2026· Updated: Apr 24, 2026

5.5

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:10.3th

Official Description

Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-supplied `Url` parameter, allowing the use of the `file://` protocol. This allows an authenticated administrator to force the backend server to interact with the local filesystem, which can lead to Local File Interaction (LFI) and potential disclosure of sensitive system information through side-channel analysis of internal logs. Version 7.23.0 contains a fix.

NVD Source

Technical Analysis

CVE-2026-41177 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 5.5.