PT-2026-96680

Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator versions 5.2.3.15 and earlier VeloCloud Orchestrator versions 6.1.3.7 and earlier VeloCloud Orchestrator versions 6.4.2.7 and earlier VeloCloud Orchestrator versions 7.0.0.2 and earlier Description An improper input...

PT-2026-96850

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description Notepad++ incompletely enforces HMAC Hash-based Message Authentication Code validation for the shortcuts.xml file. The issue occurs because the WM MACRODLGRUNMACRO entry point, used for running a...

CVE-2026-76805: Exposure of Sensitive Information to an Unauthorized Actor

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

VulnCheck KEV: CVE-2026-93952

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-96259: Server-Side Request Forgery (SSRF)

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the...

PT-2026-97057

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.10 Mattermost versions 11.8.0 through 11.8.5 Mattermost versions 11.9.0 through 11.9.1 Mattermost versions 11.10.0 through 11.10.1 Description The software fails to apply the internal-connection filter t...

CVE-2026-82000: Server-Side Request Forgery (SSRF)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

CVE-2026-80148: Server-Side Request Forgery (SSRF)

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the...

CVE-2026-81999: Server-Side Request Forgery (SSRF)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

CVE-2026-82443: Server-Side Request Forgery (SSRF)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

PT-2026-96929

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description A Server-Side Request Forgery SSRF issue exists where the make ssrf safe hook function, designed to block HTTP redirects to private or internal IP addresses by validating the Location header, ...

CVE-2026-82013: Server-Side Request Forgery (SSRF)

Adobe Campaign Classic ACC is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

PT-2026-97007

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE affected versions not specified Description Adobe Experience Manager Forms JEE contains a Server-Side Request Forgery SSRF flaw, which occurs when a server is tricked into making requests to an unintended...

PT-2026-96944

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description A server-side request forgery SSRF exists due to an incomplete fix for a previous issue. The JiraUserMixin. lookup user by permissions function uses the module-level requests.get function...

CVE-2026-95623: Server-Side Request Forgery (SSRF)

The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally without re-checking the new target URL against the scope. This...

CVE-2026-76710: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability exists in the Analytics and Location Engine ALE management interface that may allow for the disclosure of sensitive information. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted requests to certain internal endpoints. Successful...

PT-2026-96798

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.18.0 Description An authenticated user with remote-download access can perform a Server-Side Request Forgery SSRF by providing a specially crafted SrcUri through the RemoteDownloadTask.createDownloadTask function...

Insecure access controls on internal service ports in Brocade SANnav

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...

postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments

A type confusion vulnerability in PostgreSQL allows any user to execute arbitrary code as the database's operating system user by calling functions with mishandled "internal" data type arguments...

CVE-2026-61743

Chartbrew , an open-source web application for generating charts from databases and APIs, is affected by a DNS rebinding SSRF bypass prior to version 5.2.2 . The root cause is a time-of-check-time-of-use (TOCTOU) flaw: server/modules/safeRequest.js calls validateOutboundUrl() to resolve and valid...