CVE-2026-75340

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).

Published 2026-08-26. Last modified 2026-09-09.