CVE-2026-51031

Received Received - Intake

SSRF Vulnerability in FlareSolverr Before 3.4.7

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: MITRE

Description

FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This allows a remote attacker to obtain sensitive information

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-20

Last Modified

2026-07-20

Generated

2026-07-21

AI Q&A

2026-07-21

EPSS Evaluated

N/A

NVD

CVE-2026-51031

EUVD

EUVD-2026-46140

Affected Vendors & Products

Vendor	Product	Version / Range
flaresolverr	flaresolverr	to 3.4.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

FlareSolverr before version 3.4.7 has a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This flaw allows a remote attacker to make unauthorized requests from the server, potentially accessing internal resources or sensitive data.

Impact Analysis

An attacker could exploit this SSRF vulnerability to access internal systems, retrieve sensitive information, or perform unauthorized actions on behalf of the server. This may lead to data breaches or further network compromise.

Compliance Impact

This SSRF vulnerability could result in unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements. Organizations may face legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Update FlareSolverr to version 3.4.7 or later to address the SSRF vulnerability in the /v1 API endpoint.

Hi! I’m here to help you understand CVE-2026-51031. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70