CVE-2026-3588

A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.

Score

CVSS 3.1 7.5 High

Status

Analyzed - prodsec@nozominetworks.com

Published

2026-03-09

Last modified

2026-03-09

Weaknesses

CWE-918

Affected products

• Dirigera (Ikea)
• Dirigera Firmware (Ikea)

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-3588