SB2026110990 - Server-Side Request Forgery (SSRF) in Group Office

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026110990

SB2026110990 - Server-Side Request Forgery (SSRF) in Group Office

Published: November 9, 2026

Security Bulletin ID SB2026110990
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Server-Side Request Forgery (SSRF) (CVE-ID: N/A)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an authenticated user to make Group Office request internal services and disclose response content formatted as valid RSS/RDF XML.

The vulnerability exists due to incomplete blocking of IPv6 transition addresses in RSS feed URL validation when the server's network supports the corresponding transition routing. An authenticated user can subscribe to a feed using a NAT64, 6to4, or Teredo address targeting an internal service, bypassing the SSRF guard.


Remediation

Install update from vendor's website.

References