CVE-2026-55591Published
Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55591 · Microsoft / collected KEV context
cve-program · CVE-2026-55591
- https://github.com/SignalK/signalk-server/security/advisories/GHSA-q59x-jc9f-gfqf
- https://github.com/SignalK/signalk-server/commit/2816b0dda1bdde893d85c969a9c5950e7825eee7
- https://github.com/SignalK/signalk-server/releases/tag/v2.28.0
euvd · EUVD-2026-78677
- https://github.com/SignalK/signalk-server/security/advisories/GHSA-q59x-jc9f-gfqf
- https://github.com/SignalK/signalk-server/commit/2816b0dda1bdde893d85c969a9c5950e7825eee7
- https://github.com/SignalK/signalk-server/releases/tag/v2.28.0
nvd · CVE-2026-55591
- https://github.com/SignalK/signalk-server/commit/2816b0dda1bdde893d85c969a9c5950e7825eee7
- https://github.com/SignalK/signalk-server/releases/tag/v2.28.0
- https://github.com/SignalK/signalk-server/security/advisories/GHSA-q59x-jc9f-gfqf
osv · GHSA-q59x-jc9f-gfqf
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.