CVE-2026-117471Published
User-controlled Duo host permits authenticated SSRF in Psono Server
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-117471 · Microsoft / collected KEV context
cve-program · CVE-2026-117471
- https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-117471.md
- https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.2.3/psono/restapi/serializers/new_duo.py
- https://gitlab.com/esaqa/psono/psono-server/-/commit/4059830475744791f3d3a1daa4e1603aea5549ed
- https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.2.4
- https://gitlab.com/esaqa/psono/psono-server
Related operational evidence
Explicit CVE identifiers- User-controlled Duo host permits authenticated SSRF in Psono Server · Newly collected advisory · 27 Oct 2026