CVE-2026-19418

TYPO3 CMS contains a Broken Access Control in Backend and Install Tool for versions 13.0.0-13.4.33 and 14.0.0-14.3.5. Root cause: referrer enforcement from TYPO3 core SA-2020-006 became ineffective in v13.0+ because the backend/install tooling are served from the site’s main entry script rather t...

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

GHSA-9XWG-3R6F-JCX2 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-66777

SAP Approuter in SAP Business AI Platform is affected by vulnerabilities where incoming requests are not sufficiently validated before being forwarded to backend destinations. An attacker with low privileges could craft requests to bypass authorization and access protected resources beyond their ...

SonicWall SMA1000 Server-Side Request Forgery / Remote Command Execution

This Metasploit module exploits a server-side request forgery vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to...

PT-2026-70062

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana api request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can dire...

TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks

Overview Two vulnerabilities have been identified in the Trusted Platform Module TPM 2.0 reference implementation: 1. CVE-2026-6726 – Information leakage via falsified TPM keys. 2. CVE-2026-6727 – A timing side-channel vulnerability in RSA OAEP decryption. An attacker with privileged access to a...

PT-2026-70244

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may...

PT-2026-70697

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make...

Metabase 0.63.4 SQL Injection

A proof of concept exploit for an unauthenticated SQL injection vulnerability in Metabase version 0.63.4. The vulnerability allows an attacker-controlled user-id value supplied to the password reset endpoint to reach a HoneySQL query as raw SQL. On installations using the default embedded H2...

PT-2026-70152

Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description A Server-Side Request Forgery SSRF and supply chain flaw exists in the OpenShift Console Helm catalog proxy. A namespace tenant can create a ProjectHelmChartRepository using an...

PT-2026-70151

Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description An authenticated Server-Side Request Forgery SSRF flaw exists in the OpenShift Console Dev Console webhook helpers. The system fetches user-supplied target URLs server-side without...

PT-2026-70915

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0 Description The OpenAI Create Transcription action handler uses the fetch function to retrieve a user-supplied audio URL without implementing existing Server-Side Request Forgery SSRF protections. SSRF is a fla...

PT-2026-70119

An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...

PT-2026-70243

Name of the Vulnerable Software and Affected Versions TCG TPM 2.0 reference code affected versions not specified Description An information leakage issue exists that allows a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key, such as an...

PT-2026-70173

n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured. Low-privileged workflow editors with use-only access to shared credentials can redirect requests to attacker-controlled hosts...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

PT-2026-70372

CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed...

PT-2026-70356

Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the POST /api/v1/projects/:projectId/mcp-server/validate-agent-mcp-tool endpoint makes an outbound HTTP or SSE request to a user-supplied serverUrl without URL validation or SSRF protection. An authenticated user can...