CVE-2026-26957

Description

Libredesk has a SSRF Vulnerability in Webhooks in github.com/abhinavxd/libredesk

How to fix CVE-2026-26957

To remediate CVE-2026-26957, upgrade the affected package to a fixed version below.

• Go/github.com/abhinavxd/libredesk—upgrade to 1.0.2-0.20260215211005-727213631ce6 or later
• Go/github.com/abhinavxd/libredesk—upgrade to 1.0.2-0.20260215211005-727213631ce6 or later

Is CVE-2026-26957 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 1.0.2-0.20260215211005-727213631ce6
• from 0, < 1.0.2-0.20260215211005-727213631ce6

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-26957
• PATCHgithub.com/abhinavxd/libredesk
• WEBgithub.com/abhinavxd/libredesk/commit/727213631ce6a36bcb06f50ce542155e78f51316
• WEBgithub.com/abhinavxd/libredesk/security/advisories/GHSA-wgm6-9rvv-3438