CVE-2026-76177: CWE-918 Server-Side request forgery (SSRF) in OCS Inventory NG Ocsreports
Description
Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint due to insufficient validation of the HTTPS_SERV and FILE_SERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory server to make HTTP/HTTPS requests to external systems or internal resources, which could allow access to internal network services or metadata resources of cloud services.
CVSS v4.0
Score 7.1high
Affected software
OCS Inventory NG
Ocsreports
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-76177 is a SSRF vulnerability in OCS Inventory NG's Ocsreports component, specifically in the /ocsreports/?function=tele_activate endpoint. The vulnerability is due to inadequate validation of the HTTPS_SERV and FILE_SERV parameters, which an authenticated user with operator privileges can manipulate to cause the server to perform HTTP/HTTPS requests to arbitrary targets. This may allow access to internal network services or cloud metadata endpoints that are otherwise inaccessible.
Potential Impact
An authenticated operator can exploit this vulnerability to make the OCS Inventory server send requests to internal or external systems, potentially accessing sensitive internal network services or cloud metadata resources. This could lead to information disclosure or further network reconnaissance within the internal environment.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a fix is available, restrict operator privileges to trusted users and monitor usage of the tele_activate function closely.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- INCIBE
- Date Reserved
- 2026-08-19T10:24:16.827Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a994376acd9273b49c1618b
Added to database: 09/03/2026, 09:52:54 UTC
Last enriched: 09/07/2026, 13:16:34 UTC
Last updated: 10/17/2026, 18:48:22 UTC
Views: 83
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.