CVE-2026-18546
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Nov 08, 2026
Vendor
unknown
Description
IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.