CVE-2026-27797

creationtimestamp| type| source ---|---|--- 2026-08-27 15:00:12+00:00| seen| https://t.me/cve0day/276 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/276 2026-08-29 00:00:30+00:00| published-proof-of-concept| https://t.me/cve0day/276...

CVE-2026-27797 Homarr: Unauthenticated SSRF in rssFeed.ts

Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery SSRF vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive e.g., reaching...