CVE-2026-65442 is an unauthenticated SSRF vulnerability in Subtle Web Inc's FormCraft product affecting versions up to 3.9.15. SSRF vulnerabilities enable attackers to cause the server to make HTTP requests to arbitrary domains or internal systems. This vulnerability has a CVSS 3.1 score of 7.2 with vector AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, scope changed, and impacts on confidentiality and integrity but not availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation of this SSRF vulnerability could allow an unauthenticated attacker to make the server perform unauthorized requests, potentially leading to partial confidentiality and integrity compromise of data accessible by the server. There is no indication of availability impact. The vulnerability affects the server-side processing of FormCraft, which could be leveraged to access internal resources or sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently documented.