CVE-2026-66654

Name of the Vulnerable Software and Affected Versions Vehica Core versions prior to 1.0.105

Description An authenticated attacker with subscriber-level access and above can perform Server-Side Request Forgery (SSRF), a technique that allows a web application to make requests to an unintended location. This can be used to query and modify information from internal services by making web requests to arbitrary locations originating from the application.

Recommendations Update to a version newer than 1.0.104.