DaKheera47 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH DaKheera47 CVE published 2026-10-15

CVE-2026-111313

CVE-2026-111313 is a server-side request forgery vulnerability in JobOps through 0.13.1. Authenticated users or unauthenticated clients in demo mode can make the server fetch internal destinations by supplying loopback, private, or cloud metadata addresses in the url field of the POST /api/manual-jobs/fetch handler. This allows disclosure of instance metadata and internal service data.