CVE-2026-51031: n/a
FlareSolverr versions prior to 3.4.7 contain a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This vulnerability allows remote attackers to obtain sensitive information from the server. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently confirmed.
AI Analysis
Technical Summary
CVE-2026-51031 identifies an SSRF vulnerability in FlareSolverr before version 3.4.7. The flaw exists in the /v1 API endpoint, enabling remote attackers to induce the server to make unauthorized requests, potentially exposing sensitive information. The vulnerability is classified under CWE-918 (Server-Side Request Forgery). There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this SSRF vulnerability could allow an unauthenticated remote attacker to retrieve sensitive information from internal or protected resources accessible by the FlareSolverr server. The vulnerability does not impact integrity or availability but has a high confidentiality impact as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /v1 API endpoint to trusted users and networks where possible to reduce exposure.
CVE-2026-51031: n/a
Description
FlareSolverr versions prior to 3.4.7 contain a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This vulnerability allows remote attackers to obtain sensitive information from the server. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently confirmed.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-51031 identifies an SSRF vulnerability in FlareSolverr before version 3.4.7. The flaw exists in the /v1 API endpoint, enabling remote attackers to induce the server to make unauthorized requests, potentially exposing sensitive information. The vulnerability is classified under CWE-918 (Server-Side Request Forgery). There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this SSRF vulnerability could allow an unauthenticated remote attacker to retrieve sensitive information from internal or protected resources accessible by the FlareSolverr server. The vulnerability does not impact integrity or availability but has a high confidentiality impact as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /v1 API endpoint to trusted users and networks where possible to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2026-06-07T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a5e99c12a4a8d5989cede3d
Added to database: 07/20/2026, 21:57:21 UTC
Last enriched: 07/30/2026, 11:53:01 UTC
Last updated: 09/03/2026, 22:52:12 UTC
Views: 109
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.