The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 27 Aug 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | SSRF in JetLinks Community device property metadata import endpoint | |
| Weaknesses | CWE-601 |
Wed, 26 Aug 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF). | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-26T22:16:16.682Z
Reserved: 2026-08-17T00:00:00.000Z
Link: CVE-2026-75340
No data.
Status : Received
Published: 2026-08-26T23:17:19.033
Modified: 2026-08-26T23:17:19.033
Link: CVE-2026-75340
No data.
OpenCVE Enrichment
Updated: 2026-08-27T00:30:14Z
Weaknesses