A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 17 Aug 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Blind SSRF in DataHub Enables Remote Code Execution via Image Retrieval | |
| Weaknesses | CWE-918 |
Mon, 17 Aug 2026 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Datahub
Datahub datahub |
|
| Vendors & Products |
Datahub
Datahub datahub |
Mon, 17 Aug 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-17T18:11:11.783Z
Reserved: 2026-06-07T00:00:00.000Z
Link: CVE-2026-50775
No data.
Status : Received
Published: 2026-08-17T19:16:31.873
Modified: 2026-08-17T19:16:31.873
Link: CVE-2026-50775
No data.
OpenCVE Enrichment
Updated: 2026-08-17T19:45:04Z
Weaknesses