Home › CVE Intelligence › CVE-2026-55177
CVSS 9.8 CRITICAL Security Vulnerability

CVE-2026-55177: CloudTAK: Authenticated full-read SSRF in the /api/esri* routes

Authenticated full-read SSRF in CloudTAK /api/esriroutes — user-controlled URL fetched with no IP-classification guard Summary Every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled…

9.8CVSS Score
CRITICALSeverity
NOCISA KEV
Security VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-55177
VendorUnknown Vendor
Affected ProductUnknown Product
Vulnerability TypeSecurity Vulnerability
CVSS Score9.8 (CRITICAL)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Authenticated full-read SSRF in CloudTAK /api/esri* routes — user-controlled URL fetched with no IP-classification guard

#

Summary

Every route in the ESRI helper family (api/routes/esri.ts) takes a fully attacker-controlled URL from the request (POST /api/esri body `ur... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-55177 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence