THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-50236 (HIGH 7.4) — An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's priv

[NVD] CVE-2026-50236 (HIGH 7.4) — An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's priv

mednvdPublished 2026-08-11

CVE-2026-50236 CVSS: 7.4 HIGH Published: 2026-08-11T12:17:38.183

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

Indicators of compromise

CVE-2026-50236cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-50236