Skip to content
Threat Feed
Subscribe

Product

Tandoor Recipes (< 2.7.0)

1 brief RSS
high advisory

Tandoor Recipes: Server-side request forgery (CVE-2026-115810)

Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.

Tandoor Recipes web-vulnerability ssrf privilege-escalation vulnerability webserver
2t 2c