CVE-2025-52196: Ctera

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Ctera Portal 8.1.x (8.1.1417.24) allows remote attackers to induce the server to make arbitrary HTTP requests via a crafted HTML file containing an iframe.

Affected products

• Ctera Ctera: version 8.1.1417.24 only

Published 2025-12-16. Last modified 2026-10-05.