An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0). A logic flaw allowed stored database credentials to be reused after modification of the target Host, IP address, or Port. When editing an existing Enrichment Source, previously stored credentials were retained even if the connection endpoint was changed. An authenticated Operator user could redirect the database connection to unintended internal systems, resulting in SSRF and potential misuse of valid stored credentials.
References
Configurations
Configuration 1 (hide)
|
History
12 May 2026, 20:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:guardsix:logpoint:*:*:*:*:*:*:*:* cpe:2.3:a:guardsix:odbc:*:*:*:*:*:*:*:* |
|
| First Time |
Guardsix logpoint
Guardsix odbc Guardsix |
|
| References | () https://guardsix.com/media-room#/pressreleases/logpoint-becomes-guardsix-as-europe-reassesses-sovereign-security-operations-3436974 - Product | |
| References | () https://servicedesk.guardsix.com/hc/en-us/articles/35555683205021-SSRF-in-ODBC-Enrichment-Source - Vendor Advisory |
22 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-918 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.5 |
22 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-22 15:16
Updated : 2026-05-12 20:05
NVD link : CVE-2026-35548
Mitre link : CVE-2026-35548
CVE.ORG link : CVE-2026-35548
JSON object : View
Products Affected
guardsix
- logpoint
- odbc
CWE
CWE-918
Server-Side Request Forgery (SSRF)