Is CVE-2026-82477 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82477?

CVE-2026-82477 has a CVSS v3 severity of MEDIUM (5.8).

Back

CVE-2026-82477

Description

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.