high7.5
CVE-2026-3588
A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.
Impact
A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ikea | Dirigera Firmware | Version 2.866.4 |