CVE-2025-52196

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-16 · updated 2026-10-05
Weakness: CWE-918

Description

Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe.

Affected products

Ctera: 8.1.1417.24

References

https://gist.github.com/simonecris/99baeb07fe6e1803d461e44031819cd3
https://kb.ctera.com/docs/81x-portal

Get alerted when CVE-2025-52196 or the next vulnerability affects your stack