CVE-2026-35548 - Vulnerability Analysis

Overview

guardsix ODBC Enrichment Plugins < 5.2.1 contain a server side request forgery caused by logic flaw retaining stored credentials after modifying target Host, IP, or Port, letting authenticated Operator users redirect database connections to internal systems, exploit requires authenticated Operator user.

Severity & Score

Impact

Authenticated Operator users can redirect database connections to internal systems, potentially leading to SSRF and misuse of stored credentials.

Mitigation

Update to version 5.2.1 or later.

References

• https://guardsix.com/media-room#/pressreleases/logpoint-becomes-guardsix-as-europe-reassesses-sovereign-security-operations-3436974
• https://servicedesk.guardsix.com/hc/en-us/articles/35555683205021-SSRF-in-ODBC-Enrichment-Source

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner