Findings

CVE-2026-5469

A weakness has been identified in Casdoor 2.356.0.

Published Apr 3, 2026 · updated Jul 24, 2026 · casbin casdoor

A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2026 · NIST NVD

    Detected

    A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

  2. Jul 24, 2026 · NIST NVD

    Updated

    A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

  • cpe casbin/casdoor2.356.0

Sources

  • CVE.orgVulnerability recordCVE-2026-5469

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5469

    A weakness has been identified in Casdoor 2.356.0. This vulnerability affects unknown code of the component Webhook URL Handler. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The vendor was contacted early about this disclo

    nvd.nist.gov

References

CVE-2026-5469 · ZeroDay Findings