CVE-2026-81848CWE-918ssrf

CVE-2026-81848

Low · published August 28, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file src/scrapling_fetch_mcp/_fetcher.py. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. Upgrading to version 0.2.3 is sufficient to resolve this issue. This patch is called 9f6f34e92c55c3d95566ad9c62aca7327d24533a. Upgrading the affected component is advised.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
5.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
EPSS
0.00347 · 27.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-08-28T04:18Z
References (8)
https://github.com/cyberchitta/scrapling-fetch-mcp/ · [email protected]https://github.com/cyberchitta/scrapling-fetch-mcp/commit/9f6f34e92c55c3d95566ad9c62aca7327d24533a · [email protected]https://github.com/cyberchitta/scrapling-fetch-mcp/issues/6 · [email protected]https://vuldb.com/cve/CVE-2026-81848 · [email protected]https://vuldb.com/submit/887256 · [email protected]https://vuldb.com/vuln/396173 · [email protected]https://vuldb.com/vuln/396173/cti · [email protected]https://github.com/cyberchitta/scrapling-fetch-mcp/issues/6 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 27 AUG 22:30Z
    cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgery
    cvelistv5