A Note to our Customers and Partners in the Middle East
More Information
CVE-2026-3588
A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.
A local authenticated attacker can exfiltrate private keys.
March 10, 2026
This issue affects firmware versions up to, and including, v2.866.4
CVE-2026-3588
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
7.5
Update to the latest firmware.
Luca Borzacchiello at Nozomi Networks
Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.
Learn more
