CVE-2025-52196

HIGH 7.5CVE-2025-52196 · Published 16/12/2025 · updated 05/10/2026

In short

CVE-2025-52196 is a HIGH (CVSS 7.5) vulnerability affecting ctera (ctera).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ctera ctera	`= 8.1.1417.24`	No fix yet

Description

Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe.

References

gist.github.com/simonecris/99baeb07fe6e1803d461e44031819cd3 · Third Party Advisory
kb.ctera.com/docs/81x-portal · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free