CVE-2026-75340

The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).

  • Published Aug 26, 2026
  • CVSS 9.1 critical
  • 0.4% chance of exploitation in the next 30 days (EPSS)

CVE-2026-75340 at the National Vulnerability Database