9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
A Server-Side Request Forgery (SSRF) in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted longUrl.
AI Analysis
Server-Side Request Forgery (SSRF) vulnerability in shlink's automatic short URL title resolution component
Basic Information
ID
CVE-2026-50887
Source
mitre
Published
Jun 15, 2026 at 00:00
Modified
Jun 16, 2026 at 14:54
Affected Product
Vendor
shlink
Product
shlink
Version
v5.0.1
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.1 / 10
AI Severity
Critical
Vendor
shlink
Product
shlink
Version
v5.0.1