Is CVE-2026-82477 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-82477 being exploited in the wild.

How severe is CVE-2026-82477?

Medium severity, with a CVSS score of 5.8, published 29 August 2026.

Which products and versions are affected?

MITRE Heimdall 2.11.6 through 2.13.x before 2.14.0.

Is there a fix for CVE-2026-82477?

A patch was published on 2026-08-24: Patch released in v2.14.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-82477 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-82477?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-82477: MITRE Heimdall Server-Side Request Forgery in Tenable proxy

CVE-2026-82477 · Severity: medium · CVSS 5.8 · Published 2026-08-29

Heimdall is a compliance reporting and analysis platform that integrates with security scanning tools like Tenable. A vulnerability in the Tenable proxy endpoint allowed unauthenticated attackers to make arbitrary HTTP requests to internal network resources, potentially exposing sensitive systems and data that should only be accessible within a private network.

Quick answers

Is CVE-2026-82477 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-82477 being exploited in the wild.
How severe is CVE-2026-82477?: Medium severity, with a CVSS score of 5.8, published 29 August 2026.
Which products and versions are affected?: MITRE Heimdall 2.11.6 through 2.13.x before 2.14.0.
Is there a fix for CVE-2026-82477?: A patch was published on 2026-08-24: Patch released in v2.14.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-82477 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-82477?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An SSRF (Server-Side Request Forgery) vulnerability existed in the Tenable integration endpoint (apps/backend/src/tenable/tenable.controller.ts) in Heimdall versions 2.11.6 through 2.13.x. The vulnerable code did not validate or restrict the target host URLs passed to the Tenable proxy, allowing attackers to redirect requests to arbitrary internal network addresses. The fix in version 2.14.0 implemented authentication requirements, host URL allowlist validation, and explicit protocol enforcement. The vulnerability is network-reachable and does not require authentication or user interaction on the victim's part.

Affected products

MITRE Heimdall 2.11.6 through 2.13.x before 2.14.0

Timeline

2026-08-29: disclosed
2026-08-24: patched: Patch released in v2.14.0

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.