fit2cloud CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM fit2cloud CVE published 2026-10-13

CVE-2026-109189

A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts, specifically in the Swagger3ParserApiDefinition.testUrlTimeout function of the Swagger3 Parser component. This flaw allows for server-side request forgery (SSRF) attacks. The exploit is public and may be used for remote exploitation. The CVSS score is 5.3, with a severity rating of MEDIUM.