PatchSiren

Firecrawl CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Firecrawl CVE published 2026-03-26

CVE-2026-32857

The CVE record for CVE-2026-32857 was published on 2026-03-26T18:16:28.953Z and has not been modified since then. The NVD entry is currently Deferred. This SSRF protection bypass vulnerability in Firecrawl version 2.8.0 and prior allows attackers to gain access to internal network services and sensitive endpoints. The vulnerability arises from a post-redirect enforcement gap in implemented SSRF protection [truncated]