CVE-2026-39087
EUVD-2026-2523223.04.2026, 16:16
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
Awaiting analysis
This vulnerability is currently awaiting analysis.
Common Weakness Enumeration
- CWE-777 - Regular Expression without AnchorsThe software uses a regular expression to perform neutralization, but the regular expression is not anchored and may allow malicious or malformed data to slip through.
- CWE-94 - Improper Control of Generation of Code ('Code Injection')The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.