CVE-2026-117565— Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch

Quick assessment

Affected

ArtalkJS Artalk

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Artalk 在 2.10.1 版本之前存在一个无需认证的服务器端请求伪造（SSRF）漏洞。远程攻击者可以通过向接口提交匿名评论，诱使服务器请求任意 URL。攻击者可将参数设置为内部地址，该地址在仅经过协议（scheme）验证后，会被函数抓取，随后攻击者可通过公开评论列表读取页面标题，从而泄露内部资源信息。

CVSS 5.3 · Medium Updated Oct 27, 2026

Possible ATT&CK Techniques 2 AI

T1071 · Application Layer Protocol T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch

Source: CVE Program / CVE List V5

Vulnerability Description

Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a page_key to an internal URL, which GetTitleByURL fetches after only scheme validation, then read the page title through the public comment list.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ArtalkJS	Artalk	0 ~ 2.10.1	-

II. Public POCs for CVE-2026-117565

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117565

请登录查看更多情报信息。

Other References for CVE-2026-117565 (6)

https://github.com/ArtalkJS/Artalk/commit/dae6bf49c9efec755a5b3ac3e379b4004c29a049 patch
https://github.com/ArtalkJS/Artalk product
https://github.com/ArtalkJS/Artalk/blob/v2.10.0/internal/dao/service.go#L96-L103 technical-description
https://github.com/ArtalkJS/Artalk/issues/1199 issue-tracking
https://github.com/ArtalkJS/Artalk/releases/tag/v2.10.1 release-notes
https://www.vulncheck.com/advisories/artalk-before-2.10.1-unauthenticated-ssrf-via-comment-page-title-fetch third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-117565

IV. Related Vulnerabilities

Same weakness: CWE-918