High severity7.7NVD Advisory· Published Jun 11, 2026· Updated Jun 11, 2026
CVE-2026-47170
CVE-2026-47170
Description
Garlic-Hub manages digital signage network — devices, content, and playlists — from a single self-hosted interface. Prior to version 1.1, authenticated users can cause the server to issue arbitrary HTTP requests to internal services via the uploadFromUrl endpoint. This allows internal port scanning, service fingerprinting, and retrieval of internal HTTP responses which are stored in the publicly accessible media pool. This issue has been patched in version 1.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.