SSquidex

Products

Exploited and recent CVEs

• CVE-2026-41177 Medium 5.5 Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction 0.3%
• CVE-2026-41172 High 7.3 Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets) 0.2%
• CVE-2026-41171 High 7.3 SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient 0.2%
• CVE-2026-41170 High 7.2 Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests 0.2%
• CVE-2026-24736 Critical 9.1 Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration 0.5%
• CVE-2023-46252 Medium 6.8 Cross-Site Scripting (XSS) via postMessage Handler in Squidex 0.5%
• CVE-2023-46253 Critical 9.1 Remote code execution in Squidex 1.5%
• CVE-2023-46744 Medium 5.4 Stored Cross-site Scripting in Squidex 0.5%
• CVE-2023-3580 Medium 5.4 Improper Handling of Additional Special Element in squidex/squidex 0.6%
• CVE-2023-0643 Medium 5.4 Improper Handling of Additional Special Element in squidex/squidex 0.6%
• CVE-2023-0642 Medium 6.8 Cross-Site Request Forgery (CSRF) in squidex/squidex 0.4%