A vulnerability was identified in PowerJob up to 5.1.2. (CVE-2026-82630)

CVE-2026-82630 is a server-side request forgery vulnerability affecting PowerJob up to version 5.1.2. The flaw resides in the MuConnectionManager.getOrCreateConnection function of the powerjob-server component, specifically in the Transport Endpoint. An attacker can remotely manipulate this function to cause the server to make unauthorized requests. The vulnerability has a CVSS 3.1 base score of 7.3, indicating a moderate severity level. Public exploit code is available, but no known active exploitation has been reported. The vendor has not yet issued a response or patch.

Successful exploitation allows an unauthenticated remote attacker to perform server-side request forgery, potentially leading to unauthorized internal network access or information disclosure. The CVSS vector indicates low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability at a low level.

No official fix or patch has been released by the vendor as of the current information. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting network access to the affected service and monitoring for suspicious requests targeting the vulnerable function.