Read the docs
TI-2026-56870 Aliases CVE-2026-82477GHSA-mgq6-mc59-8j8m

Server-side request forgery in MITRE Heimdall

Priority HIGH 65CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00475 41st percentileScored 2026-11-07
Fix Fixed Heimdall (MITRE): 2.14.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MITREHeimdall2.11.6 to before 2.14.02.14.0Patch availableCNA
  • Heimdall VendorMITRE Affected 2.11.6 to before 2.14.0 Fixed in 2.14.0 Patch available CNA

Remediation

  • Fix · CNA Heimdall (MITRE) Fixed in 2.14.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-82477
  2. 2026-10-03 Alias added: GHSA-mgq6-mc59-8j8m

References

Other 3

  • TI-2025-20211 OS command injection in MITRE Caldera CVSS 3.1CRITICAL 10.0
  • TI-2022-13050 Potential secrets being logged to disk in CVE Services CVSS 3.1HIGH 7.5
  • TI-2022-19658 MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact… CVSS 3.1MEDIUM 5.4
  • TI-2021-18846 An issue was discovered in CALDERA 2.8.1. CVSS 3.1HIGH 8.8
  • TI-2008-04487 PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows… CVSS 2.0HIGH 10.0
  • TI-2020-13738 A command injection vulnerability in the sandcat plugin of Caldera 2.3.1 and earlier… CVSS 3.1HIGH 8.8
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences