SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-66325

MEDIUM · CVSS 6.1 EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-09-03

CyberRota Analysis

AI-Generated

Microsoft Edge (Chromium-based) is vulnerable to a server-side request forgery (SSRF) that enables unauthorized attackers to spoof requests over the network. This flaw could lead to unauthorized access to internal resources, potentially compromising sensitive data. Organizations using Microsoft Edge should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-66325
Severity
MEDIUM
CVSS
6.1
EPSS
0.22%
Microsoft

Original NVD Description

Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91734 HIGH CVE-2026-75624 HIGH CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH