Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:tandoor_recipes:tandoor_recipes:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Tandoor Recipes: Server-side request forgery (CVE-2026-115810)

Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.

Tandoor Recipes web-vulnerability ssrf privilege-escalation vulnerability webserver
2t 2c