🚨 CVE-2026-85614
OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the GET /tools/site-checker endpoint that accepts a fully client-controlled URL parameter with no private IP filtering or DNS-rebinding protection. Attackers can make the OpenPanel server issue requests to internal services, localhost, and cloud metadata endpoints, reading internal HTTP response titles, headers, status codes, and SSL certificate information.
🎖@cveNotify
GitHub
Unauthenticated SSRF in OpenPanel API site-checker (GET /tools/site-checker?url=)
## Summary
The OpenPanel API exposes an unauthenticated SEO "site checker" endpoint (`GET /tools/site-checker?url=`) that fetches an arbitrary, fully client-controlled URL server-side and...
September 4, 2026 50
