Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-86806 is a vulnerability classified as Server-Side Request Forgery (SSRF), affecting GeoLibre (affected versions: 2.0, 2.1, and other affected versions). This vulnerability is rated Medium, with a CVSS score of 6.9. Current sources do not report this vulnerability as exploited.
Analyzing data...
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name: b745f62e29fa37364686525a21eee5e5c0f8a369. It is recommended to upgrade the affected component.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
