CVE-2026-3588: Server-Side Request Forgery (SSRF) in ikea dirigera

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-09 · updated 2026-06-17
Weakness: CWE-918

Description

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

Affected products

ikea dirigera: 2.866.4

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-3588

Get alerted when CVE-2026-3588 or the next vulnerability affects your stack