CVE-2026-33953 HIGH

CVE-2026-33953: LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce

Vendor Kovah
Product LinkAce
Weakness CWE-918 · SSRF
Published March 27, 2026
Last update March 30, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname. This allows an authenticated user to trigger server-side requests to internal services reachable by the LinkAce server but not directly reachable by an external user. Version 2.5.3 patches the issue.

Key dates

02Disclosure timeline

March 27, 2026 CVE published
March 30, 2026 Record updated