marqo-ai

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

marqo-ai records in CISA KEV

No marqo-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58774 CVE-2026-85662 · GHSA-q6xf-xgg7-h2f2

Marqo 2.26.0 Server-Side Request Forgery via Media URLs

LOW 37

Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00398 Published 2026-09-04 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0