CVE-2026-40089: SSRF in Sonicverse Radio Audio Streaming Stack

The SSRF vulnerability in Sonicverse allows an authenticated operator to make arbitrary HTTP requests on behalf of the Sonicverse server. This means an attacker could potentially scan internal networks for exposed services, access sensitive data stored behind firewalls, or even interact with internal APIs without proper authorization. For example, an attacker could attempt to access internal databases, configuration files, or other critical systems. The blast radius extends to any internal resources accessible via HTTP or HTTPS. This vulnerability is particularly concerning because it requires only authentication, making it relatively easy to exploit if an attacker gains access to a valid operator account.

1. Reserved2026-04-09
2. Published2026-04-09
3. Modified2026-04-13
4. EPSS updated2026-04-17

The primary mitigation for CVE-2026-40089 is to upgrade the Sonicverse Radio Audio Streaming Stack to version cb1ddbacafcb441549fe87d3eeabdb6a085325e4 or later. If an immediate upgrade is not possible, consider implementing temporary workarounds such as restricting outbound network access from the Sonicverse server using a firewall or proxy. Additionally, carefully review and restrict the permissions granted to operator accounts to minimize the potential impact of a compromised account. After the upgrade, confirm the fix by attempting to trigger the SSRF vulnerability with a known malicious URL; the request should be blocked or rejected.