Secuno
ENNL
Book demo

CVE-2026-88592

9.1 CRITICAL
  1. Published16 Sept 2026

Description

kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host whitelist. However, the URL parameter validated by the filter is not the same parameter the controller actually fetches: the filter validates the first non-empty parameter in a fixed priority order, while the controller only reads and fetches urlPath. By supplying both urlPath=<real target> and url=<whitelisted decoy address> in the same request, the decoy passes validation while the unvalidated real target is fetched server-side — and the response body is echoed back to the attacker.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-542398.8
Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin…
CVE-2026-860398.2
libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until…
CVE-2026-269508.1
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient…
CVE-2026-615918.1
djust provides Phoenix LiveView-style reactive server-side rendering for Django with…
CVE-2026-631278.2
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp…
CVE-2026-734358.2
On affected platforms running Arista EOS with Open Shortest Path First version 2…

Frequently asked

Is CVE-2026-88592 being actively exploited?

CVE-2026-88592 is not in the CISA KEV catalog.

How severe is CVE-2026-88592?

CVE-2026-88592 has a CVSS 3.1 base score of 9.1, rated critical.

How do I fix CVE-2026-88592?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-88592 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.