CVE-2026-125359— Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Setting

Quick assessment

Affected

fancydirty mediary-scout

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 2026.11.05 之前的 Mediary Scout 版本中存在一个服务器端请求伪造（SSRF）漏洞。该漏洞允许任何已认证用户（包括非所有者账户）在未经角色权限检查的情况下，通过设置任意的 PanSou 基础 URL。攻击者可触发函数，向内部主机发送服务器端 POST 请求，并利用不同的错误响应作为预言机，从而探测内部主机的 IP 地址和端口。

CVSS 4.3 · Medium Updated Nov 10, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Setting

Source: CVE Program / CVE List V5

Vulnerability Description

Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, including non-owner accounts, to set an arbitrary PanSou base URL via savePanSouBaseUrlAction without role checks. Attackers can trigger probePanSou() to send server-side POST requests to internal hosts and use distinct error responses as an oracle for internal host and port discovery.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
fancydirty	mediary-scout	0 ~ 2026.11.05	-

II. Public POCs for CVE-2026-125359

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125359

请登录查看更多情报信息。

Other References for CVE-2026-125359 (6)

https://github.com/fancydirty/mediary-scout/blob/v2026.10.29/apps/web/lib/pansou-probe.ts#L18-L34 technical-description
https://github.com/fancydirty/mediary-scout/commit/9cb9ab5eea492bc8f61f5c4d63f9c6b6800f7e1f patch
https://github.com/fancydirty/mediary-scout product
https://github.com/fancydirty/mediary-scout/issues/366 issue-tracking
https://github.com/fancydirty/mediary-scout/releases/tag/v2026.11.05 release-notes
https://www.vulncheck.com/advisories/mediary-scout-before-2026.11.05-ssrf-via-pansou-search-source-setting third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-125359

IV. Related Vulnerabilities

Same weakness: CWE-918