ntfy

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ntfy records in CISA KEV

No ntfy vulnerabilities are listed in CISA KEV.

1 record

TI-2026-28264 CVE-2026-39087 · GHSA-pqhx-w72w-m393

MEDIUM 49

ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00272 Published 2026-04-23 Fixed in 2.22.0 CWE-777