CVE Intelligence

Ntfy vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ntfy products: 1 record(s), with severity, exploitation and fixes.

Ntfy 1

Exploited only (KEV) →

CVE-2026-39087 Medium · 6.4 CWE-777 Apr 23, 2026
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push…
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.