{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-5418", "tracking": { "current_release_date": "2026-04-03T15:27:24.110554Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-5418", "initial_release_date": "2026-03-09T03:27:13.494950Z", "revision_history": [ { "date": "2026-03-09T03:27:13.494950Z", "number": "1", "summary": "NCSC Score created." }, { "date": "2026-04-02T11:35:08.158007Z", "number": "2", "summary": "NCSC Score updated." }, { "date": "2026-04-02T19:03:17.334345Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (98).| Product Identifiers created (99).| Products created (1).| Exploits created (1).| References created (4).| CWES updated (1)." }, { "date": "2026-04-02T19:03:38.290441Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-04-02T20:10:34.869762Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-04-02T20:10:36.688246Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-04-03T13:39:33.459943Z", "number": "7", "summary": "Unknown change." }, { "date": "2026-04-03T13:39:47.354417Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-04-03T15:26:23.838009Z", "number": "9", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-04-03T15:26:26.654455Z", "number": "10", "summary": "NCSC Score updated." } ], "status": "interim", "version": "10" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.0", "product": { "name": "vers:unknown/1.0", "product_id": "CSAFPID-5455621", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.1", "product": { "name": "vers:unknown/1.1", "product_id": "CSAFPID-5455622", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.10", "product": { "name": "vers:unknown/1.10", "product_id": "CSAFPID-5455631", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.11", "product": { "name": "vers:unknown/1.11", "product_id": "CSAFPID-5455632", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.12", "product": { "name": "vers:unknown/1.12", "product_id": "CSAFPID-5455633", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.13", "product": { "name": "vers:unknown/1.13", "product_id": "CSAFPID-5455634", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.14", "product": { "name": "vers:unknown/1.14", "product_id": "CSAFPID-5455635", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.15", "product": { "name": "vers:unknown/1.15", "product_id": "CSAFPID-5455636", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.16", "product": { "name": "vers:unknown/1.16", "product_id": "CSAFPID-5455637", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.17", "product": { "name": "vers:unknown/1.17", "product_id": "CSAFPID-5455638", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.18", "product": { "name": "vers:unknown/1.18", "product_id": "CSAFPID-5455639", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.19", "product": { "name": "vers:unknown/1.19", "product_id": "CSAFPID-5455640", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.2", "product": { "name": "vers:unknown/1.2", "product_id": "CSAFPID-5455623", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.20", "product": { "name": "vers:unknown/1.20", "product_id": "CSAFPID-5455641", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.21", "product": { "name": "vers:unknown/1.21", "product_id": "CSAFPID-5455642", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.22", "product": { "name": "vers:unknown/1.22", "product_id": "CSAFPID-5455643", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.23", "product": { "name": "vers:unknown/1.23", "product_id": "CSAFPID-5455644", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.24", "product": { "name": "vers:unknown/1.24", "product_id": "CSAFPID-5455645", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.25", "product": { "name": "vers:unknown/1.25", "product_id": "CSAFPID-5455646", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.26", "product": { "name": "vers:unknown/1.26", "product_id": "CSAFPID-5455647", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.27", "product": { "name": "vers:unknown/1.27", "product_id": "CSAFPID-5455648", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.28", "product": { "name": "vers:unknown/1.28", "product_id": "CSAFPID-5455649", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.29", "product": { "name": "vers:unknown/1.29", "product_id": "CSAFPID-5455650", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.3", "product": { "name": "vers:unknown/1.3", "product_id": "CSAFPID-5455624", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.30", "product": { "name": "vers:unknown/1.30", "product_id": "CSAFPID-5455651", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.31", "product": { "name": "vers:unknown/1.31", "product_id": "CSAFPID-5455652", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.32", "product": { "name": "vers:unknown/1.32", "product_id": "CSAFPID-5455653", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.33", "product": { "name": "vers:unknown/1.33", "product_id": "CSAFPID-5455654", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.34", "product": { "name": "vers:unknown/1.34", "product_id": "CSAFPID-5455655", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.35", "product": { "name": "vers:unknown/1.35", "product_id": "CSAFPID-5455656", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.36", "product": { "name": "vers:unknown/1.36", "product_id": "CSAFPID-5455657", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.37", "product": { "name": "vers:unknown/1.37", "product_id": "CSAFPID-5455658", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.38", "product": { "name": "vers:unknown/1.38", "product_id": "CSAFPID-5455659", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.39", "product": { "name": "vers:unknown/1.39", "product_id": "CSAFPID-5455660", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.4", "product": { "name": "vers:unknown/1.4", "product_id": "CSAFPID-5455625", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.40", "product": { "name": "vers:unknown/1.40", "product_id": "CSAFPID-5455661", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.41", "product": { "name": "vers:unknown/1.41", "product_id": "CSAFPID-5455662", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.42", "product": { "name": "vers:unknown/1.42", "product_id": "CSAFPID-5455663", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.43", "product": { "name": "vers:unknown/1.43", "product_id": "CSAFPID-5455664", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.44", "product": { "name": "vers:unknown/1.44", "product_id": "CSAFPID-5455665", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.45", "product": { "name": "vers:unknown/1.45", "product_id": "CSAFPID-5455666", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.46", "product": { "name": "vers:unknown/1.46", "product_id": "CSAFPID-5455667", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.47", "product": { "name": "vers:unknown/1.47", "product_id": "CSAFPID-5455668", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.48", "product": { "name": "vers:unknown/1.48", "product_id": "CSAFPID-5455669", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.49", "product": { "name": "vers:unknown/1.49", "product_id": "CSAFPID-5455670", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.5", "product": { "name": "vers:unknown/1.5", "product_id": "CSAFPID-5455626", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.50", "product": { "name": "vers:unknown/1.50", "product_id": "CSAFPID-5455671", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.51", "product": { "name": "vers:unknown/1.51", "product_id": "CSAFPID-5455672", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.52", "product": { "name": "vers:unknown/1.52", "product_id": "CSAFPID-5455673", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.53", "product": { "name": "vers:unknown/1.53", "product_id": "CSAFPID-5455674", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.54", "product": { "name": "vers:unknown/1.54", "product_id": "CSAFPID-5455675", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.55", "product": { "name": "vers:unknown/1.55", "product_id": "CSAFPID-5455676", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.56", "product": { "name": "vers:unknown/1.56", "product_id": "CSAFPID-5455677", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.57", "product": { "name": "vers:unknown/1.57", "product_id": "CSAFPID-5455678", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.58", "product": { "name": "vers:unknown/1.58", "product_id": "CSAFPID-5455679", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.59", "product": { "name": "vers:unknown/1.59", "product_id": "CSAFPID-5455680", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.6", "product": { "name": "vers:unknown/1.6", "product_id": "CSAFPID-5455627", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.60", "product": { "name": "vers:unknown/1.60", "product_id": "CSAFPID-5455681", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.61", "product": { "name": "vers:unknown/1.61", "product_id": "CSAFPID-5455682", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.62", "product": { "name": "vers:unknown/1.62", "product_id": "CSAFPID-5455683", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.63", "product": { "name": "vers:unknown/1.63", "product_id": "CSAFPID-5455684", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.64", "product": { "name": "vers:unknown/1.64", "product_id": "CSAFPID-5455685", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.65", "product": { "name": "vers:unknown/1.65", "product_id": "CSAFPID-5455686", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.66", "product": { "name": "vers:unknown/1.66", "product_id": "CSAFPID-5455687", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.67", "product": { "name": "vers:unknown/1.67", "product_id": "CSAFPID-5455688", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.68", "product": { "name": "vers:unknown/1.68", "product_id": "CSAFPID-5455689", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.69", "product": { "name": "vers:unknown/1.69", "product_id": "CSAFPID-5455690", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7", "product": { "name": "vers:unknown/1.7", "product_id": "CSAFPID-5455628", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.70", "product": { "name": "vers:unknown/1.70", "product_id": "CSAFPID-5455691", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.71", "product": { "name": "vers:unknown/1.71", "product_id": "CSAFPID-5455692", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.72", "product": { "name": "vers:unknown/1.72", "product_id": "CSAFPID-5455693", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.73", "product": { "name": "vers:unknown/1.73", "product_id": "CSAFPID-5455694", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.74", "product": { "name": "vers:unknown/1.74", "product_id": "CSAFPID-5455695", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.75", "product": { "name": "vers:unknown/1.75", "product_id": "CSAFPID-5455696", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.76", "product": { "name": "vers:unknown/1.76", "product_id": "CSAFPID-5455697", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.77", "product": { "name": "vers:unknown/1.77", "product_id": "CSAFPID-5455698", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.78", "product": { "name": "vers:unknown/1.78", "product_id": "CSAFPID-5455699", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.79", "product": { "name": "vers:unknown/1.79", "product_id": "CSAFPID-5455700", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.8", "product": { "name": "vers:unknown/1.8", "product_id": "CSAFPID-5455629", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.80", "product": { "name": "vers:unknown/1.80", "product_id": "CSAFPID-5455701", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.81", "product": { "name": "vers:unknown/1.81", "product_id": "CSAFPID-5455702", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.82", "product": { "name": "vers:unknown/1.82", "product_id": "CSAFPID-5455703", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.83", "product": { "name": "vers:unknown/1.83", "product_id": "CSAFPID-5455704", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.84", "product": { "name": "vers:unknown/1.84", "product_id": "CSAFPID-5455705", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.85", "product": { "name": "vers:unknown/1.85", "product_id": "CSAFPID-5455706", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.86", "product": { "name": "vers:unknown/1.86", "product_id": "CSAFPID-5455707", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.87", "product": { "name": "vers:unknown/1.87", "product_id": "CSAFPID-5455708", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.88", "product": { "name": "vers:unknown/1.88", "product_id": "CSAFPID-5455709", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.89", "product": { "name": "vers:unknown/1.89", "product_id": "CSAFPID-5455710", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.9", "product": { "name": "vers:unknown/1.9", "product_id": "CSAFPID-5455630", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.90", "product": { "name": "vers:unknown/1.90", "product_id": "CSAFPID-5455711", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.91", "product": { "name": "vers:unknown/1.91", "product_id": "CSAFPID-5455712", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.92", "product": { "name": "vers:unknown/1.92", "product_id": "CSAFPID-5455713", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.93", "product": { "name": "vers:unknown/1.93", "product_id": "CSAFPID-5455714", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.94", "product": { "name": "vers:unknown/1.94", "product_id": "CSAFPID-5455715", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.95", "product": { "name": "vers:unknown/1.95", "product_id": "CSAFPID-5774005", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.96", "product": { "name": "vers:unknown/1.96", "product_id": "CSAFPID-5984075", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.97", "product": { "name": "vers:unknown/1.97", "product_id": "CSAFPID-5984076", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/1.99", "product": { "name": "vers:unknown/1.99", "product_id": "CSAFPID-5985265", "product_identification_helper": { "cpe": "cpe:2.3:a:appsmith:appsmith:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "appsmith" } ], "category": "vendor", "name": "appsmithorg" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-5418", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "description", "text": "A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/appsmith/util/WebClientUtils.java of the component Dashboard. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.99 is recommended to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5418.json" }, { "category": "description", "text": "A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/appsmith/util/WebClientUtils.java of the component Dashboard. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.99 is recommended to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-5418" }, { "category": "other", "text": "0.00041", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "title": "CVSSV4" }, { "category": "other", "text": "5.5", "title": "CVSSV4 base score" }, { "category": "other", "text": "3.1", "title": "NCSC Score" }, { "category": "other", "text": "There is exploit data available from source Cveprojectv5, Exploit code publicly available, Is related to (a version of) an uncommon product, There is cwe data available from source Nvd", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5455621", "CSAFPID-5455622", "CSAFPID-5455623", "CSAFPID-5455624", "CSAFPID-5455625", "CSAFPID-5455626", "CSAFPID-5455627", "CSAFPID-5455628", "CSAFPID-5455629", "CSAFPID-5455630", "CSAFPID-5455631", "CSAFPID-5455632", "CSAFPID-5455633", "CSAFPID-5455634", "CSAFPID-5455635", "CSAFPID-5455636", "CSAFPID-5455637", "CSAFPID-5455638", "CSAFPID-5455639", "CSAFPID-5455640", "CSAFPID-5455641", "CSAFPID-5455642", "CSAFPID-5455643", "CSAFPID-5455644", "CSAFPID-5455645", "CSAFPID-5455646", "CSAFPID-5455647", "CSAFPID-5455648", "CSAFPID-5455649", "CSAFPID-5455650", "CSAFPID-5455651", "CSAFPID-5455652", "CSAFPID-5455653", "CSAFPID-5455654", "CSAFPID-5455655", "CSAFPID-5455656", "CSAFPID-5455657", "CSAFPID-5455658", "CSAFPID-5455659", "CSAFPID-5455660", "CSAFPID-5455661", "CSAFPID-5455662", "CSAFPID-5455663", "CSAFPID-5455664", "CSAFPID-5455665", "CSAFPID-5455666", "CSAFPID-5455667", "CSAFPID-5455668", "CSAFPID-5455669", "CSAFPID-5455670", "CSAFPID-5455671", "CSAFPID-5455672", "CSAFPID-5455673", "CSAFPID-5455674", "CSAFPID-5455675", "CSAFPID-5455676", "CSAFPID-5455677", "CSAFPID-5455678", "CSAFPID-5455679", "CSAFPID-5455680", "CSAFPID-5455681", "CSAFPID-5455682", "CSAFPID-5455683", "CSAFPID-5455684", "CSAFPID-5455685", "CSAFPID-5455686", "CSAFPID-5455687", "CSAFPID-5455688", "CSAFPID-5455689", "CSAFPID-5455690", "CSAFPID-5455691", "CSAFPID-5455692", "CSAFPID-5455693", "CSAFPID-5455694", "CSAFPID-5455695", "CSAFPID-5455696", "CSAFPID-5455697", "CSAFPID-5455698", "CSAFPID-5455699", "CSAFPID-5455700", "CSAFPID-5455701", "CSAFPID-5455702", "CSAFPID-5455703", "CSAFPID-5455704", "CSAFPID-5455705", "CSAFPID-5455706", "CSAFPID-5455707", "CSAFPID-5455708", "CSAFPID-5455709", "CSAFPID-5455710", "CSAFPID-5455711", "CSAFPID-5455712", "CSAFPID-5455713", "CSAFPID-5455714", "CSAFPID-5455715", "CSAFPID-5774005", "CSAFPID-5984075", "CSAFPID-5984076" ], "known_not_affected": [ "CSAFPID-5985265" ] }, "references": [ { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/5xxx/CVE-2026-5418.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-5418" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://vuldb.com/vuln/354855" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://vuldb.com/vuln/354855/cti" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://vuldb.com/submit/780190" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://github.com/appsmithorg/appsmith/" }, { "category": "external", "summary": "Reference - nvd", "url": "https://github.com/appsmithorg/appsmith/security/advisories/GHSA-9m89-5jw7-q5cr" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseScore": 7.3, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-5455621", "CSAFPID-5455622", "CSAFPID-5455623", "CSAFPID-5455624", "CSAFPID-5455625", "CSAFPID-5455626", "CSAFPID-5455627", "CSAFPID-5455628", "CSAFPID-5455629", "CSAFPID-5455630", "CSAFPID-5455631", "CSAFPID-5455632", "CSAFPID-5455633", "CSAFPID-5455634", "CSAFPID-5455635", "CSAFPID-5455636", "CSAFPID-5455637", "CSAFPID-5455638", "CSAFPID-5455639", "CSAFPID-5455640", "CSAFPID-5455641", "CSAFPID-5455642", "CSAFPID-5455643", "CSAFPID-5455644", "CSAFPID-5455645", "CSAFPID-5455646", "CSAFPID-5455647", "CSAFPID-5455648", "CSAFPID-5455649", "CSAFPID-5455650", "CSAFPID-5455651", "CSAFPID-5455652", "CSAFPID-5455653", "CSAFPID-5455654", "CSAFPID-5455655", "CSAFPID-5455656", "CSAFPID-5455657", "CSAFPID-5455658", "CSAFPID-5455659", "CSAFPID-5455660", "CSAFPID-5455661", "CSAFPID-5455662", "CSAFPID-5455663", "CSAFPID-5455664", "CSAFPID-5455665", "CSAFPID-5455666", "CSAFPID-5455667", "CSAFPID-5455668", "CSAFPID-5455669", "CSAFPID-5455670", "CSAFPID-5455671", "CSAFPID-5455672", "CSAFPID-5455673", "CSAFPID-5455674", "CSAFPID-5455675", "CSAFPID-5455676", "CSAFPID-5455677", "CSAFPID-5455678", "CSAFPID-5455679", "CSAFPID-5455680", "CSAFPID-5455681", "CSAFPID-5455682", "CSAFPID-5455683", "CSAFPID-5455684", "CSAFPID-5455685", "CSAFPID-5455686", "CSAFPID-5455687", "CSAFPID-5455688", "CSAFPID-5455689", "CSAFPID-5455690", "CSAFPID-5455691", "CSAFPID-5455692", "CSAFPID-5455693", "CSAFPID-5455694", "CSAFPID-5455695", "CSAFPID-5455696", "CSAFPID-5455697", "CSAFPID-5455698", "CSAFPID-5455699", "CSAFPID-5455700", "CSAFPID-5455701", "CSAFPID-5455702", "CSAFPID-5455703", "CSAFPID-5455704", "CSAFPID-5455705", "CSAFPID-5455706", "CSAFPID-5455707", "CSAFPID-5455708", "CSAFPID-5455709", "CSAFPID-5455710", "CSAFPID-5455711", "CSAFPID-5455712", "CSAFPID-5455713", "CSAFPID-5455714", "CSAFPID-5455715", "CSAFPID-5774005", "CSAFPID-5984075", "CSAFPID-5984076" ] } ], "title": "CVE-2026-5418" } ] }