CVE-2026-82630

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-82630
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82630.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-82630
Published
2026-08-31T07:30:09.118Z
Modified
2026-09-02T03:47:21.944679970Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
PowerJob Transport Endpoint TestController.java MuConnectionManager.getOrCreateConnection server-side request forgery
Details

A vulnerability was identified in PowerJob up to 5.1.2. Impacted is the function MuConnectionManager.getOrCreateConnection of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/TestController.java of the component Transport Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/82xxx/CVE-2026-82630.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-918"
    ]
}
References

Affected packages

Git / github.com/powerjob/powerjob

Affected ranges

Type
GIT
Repo
https://github.com/powerjob/powerjob
Events
Introduced
0bb069fa5b3d59a1641cf9533734da397cf2df08
Last affected
332179de26b44f0a949f7594ce9f57ee26fb6b27
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "5.1.1"
        },
        {
            "last_affected": "5.1.1"
        },
        {
            "introduced": "5.1.2"
        },
        {
            "last_affected": "5.1.2"
        }
    ]
}

Affected versions

5.*
5.1.0
5.1.1
5.1.2
v5.*
v5.1.0-bugfix
v5.1.1
v5.1.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-82630.json"