{"uuid": "9accab30-1e39-463b-9e77-0c693e7ecf71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92931", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388558959517478", "content": "Yet another perfect 10 this morning. This one from a company that knows its way around perfect 10s. \ud83e\udd73 \nhttps://www.cve.org/CVERecord?id=CVE-2026-92931\nsev:CRIT 10.0 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\n\nCWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.", "creation_timestamp": "2026-10-05T13:34:21.688367Z"}