CVE-2026-3588

Server-Side Request Forgery (SSRF) in ikea dirigera PUBLISHED

Description (CNA)

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

Affected (CNA)

Vendor / product	Versions
ikea / dirigera	affected 0 through 2.866.4

CWE

CWE-918

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-3588

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.