MITRE vulnerabilities
Published CVEs affecting MITRE products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-82477
Medium · 5.8
CWE-918 Aug 29, 2026
Server-Side Request Forgery (SSRF) in MITRE Heimdall
In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via the Tenable proxy endpoint. This occurs in apps/backend/src/tenable/tenable.controller.ts.