CVE-2026-125359 · Other
NO FIX YET · SEE WHAT TO DO
Mediary Scout before 2026.11.05 lets any signed-in user, including non-owner accounts, set an arbitrary PanSou base URL without a role check. The server then sends POST requests to that URL, so an attacker can map internal hosts and ports through distinct error responses.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Instances of Mediary Scout before 2026.11.05 where any authenticated account, including non-owner accounts, can reach the PanSou base URL setting. Deployments where only the owner has an account, or where the instance is not reachable by other users, have a smaller exposure. unknown whether the sources name a specific deployment pattern beyond this.
Not affected if auth-required
Who cares mediary-scout, self-hosted
2026.11.05 or laterMediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, including non-owner accounts, to set an arbitrary PanSou base URL via savePanSouBaseUrlAction without role checks. Attackers can trigger probePanSou() to send server-side POST requests to internal hosts and use distinct error responses as an oracle for internal host and port discovery.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.