What’s Vulnerable › Vulnerabilities

CVE-2026-63107: LimeSurvey SSRF via REST API Survey Template Host Header

• Severity: high (CVSS 7.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-20 · updated 2026-07-23
• Weakness: CWE-918

Description

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use of the HTTP Host header in the getTemplateData() function to reach internal network services, cloud metadata endpoints, and extract sensitive credentials such as IAM tokens from instance metadata services.

Affected products

• LimeSurvey: through 6.17.10; through 7.0.4

References

• https://github.com/geo-chen/oss/blob/main/limesurvey.md
• https://www.vulncheck.com/advisories/limesurvey-ssrf-via-rest-api-survey-template-host-header

Get alerted when CVE-2026-63107 or the next vulnerability affects your stack