Is CVE-2026-82243 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82243?

CVE-2026-82243 has a CVSS v3 severity of HIGH (7.6).

Back

CVE-2026-82243

Description

Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to attacker-controlled servers, gaining full database access in cloud deployments.