Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-54735

Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafted bid request parameters to cause server-side requests to unintended destinations and potentially expose internal network services or sensitive server endpoints. This issue is fixed in version 4.4.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.2%
CVSS Severity
CVSS v3 Score 10.0
Products affected by CVE-2026-54735


Contact Us

Shodan ® - All rights reserved