Critical Vulnerability in Prebid Server: CVE-2026-54735
A critical vulnerability (CVE-2026-54735) with a CVSS score of 10 has been discovered in Prebid Server, an open-source solution for real-time advertising auctions. The vulnerability allows crafted bid request parameters to cause server-side requests to unintended destinations, potentially exposing internal network services or sensitive server endpoints. This issue affects Prebid Server versions prior to 4.4.0 and has been fixed in version 4.4.0. Organizations using Prebid Server should immediately upgrade to version 4.4.0 to mitigate this vulnerability.