CVE-2026-92566— DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview
Quick assessment
Affected
datageartech datagear
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
DataGear 6.0.0 及更早版本中， 端点存在服务器端请求伪造（SSRF）漏洞。该漏洞允许未认证的攻击者通过提供由调用方控制的 URI，向内部端点和云元数据服务发起任意的 HTTP 请求（GET、POST、PUT、PATCH 或 DELETE），并在无认证或校验的情况下获取完整的响应体。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92566
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview
Source: CVE Program / CVE List V5
Vulnerability Description
DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/Http endpoint that allows unauthenticated attackers to execute arbitrary HTTP requests by supplying a caller-controlled URI. Attackers can issue GET, POST, PUT, PATCH, or DELETE requests to internal endpoints and cloud metadata services, receiving full response bodies without authentication or validation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| datageartech | datagear | 0 ~ 6.0.0 | - |
|
II. Public POCs for CVE-2026-92566
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92566
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-92566 (1)
Exploits & Public PoCs for CVE-2026-92566 (1)
Other References for CVE-2026-92566 (2)
IV. Related Vulnerabilities
Same product: datagear
-
CVE-2026-19110
DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java -
CVE-2023-7299
DataGear resolveSql sql injection -
CVE-2024-7552
DataGear Data Schema Page ConversionSqlParamValueMapper.java -
CVE-2023-2042
DataGear JDBC Server deserialization -
CVE-2023-1772
DataGear Diagram Type cross site scripting
Same weakness: CWE-918
-
CVE-2026-68536
Apache MyFaces: Server-Side Request Forgery / Local File Inc -
CVE-2026-59823
LiteLLM: Server-side request forgery via the `user_config` r -
CVE-2026-92719
Quickwit through 0.9.0 SSRF via SQS queue_url Parameter -
CVE-2026-85732
oras-go: Blind SSRF via unvalidated Link header URL in pagin -
CVE-2026-92602
TDuck survey form through 5.3 Server-Side Request Forgery vi
V. Comments for CVE-2026-92566
No comments yet