CVE-2026-75340: n/a

CVE-2026-75340 is a critical SSRF vulnerability affecting the device metadata import interface of jetlinks community 2.11. The flaw allows unauthenticated remote attackers to cause the server to perform arbitrary requests, potentially exposing sensitive information or enabling further attacks. The CVSS v3.1 base score is 9.1, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality and integrity impact. No known exploits in the wild or vendor advisories have been published at this time.

Successful exploitation can lead to unauthorized internal network requests initiated by the vulnerable server, potentially exposing sensitive data or enabling further internal attacks. The confidentiality and integrity of the system are rated high impact, while availability is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the vulnerable interface and implementing network-level controls to limit outbound requests from the server.