CVE-2026-109190

A server-side request forgery (SSRF) vulnerability exists in conductor-oss conductor version 3.31.2 . The flaw is located within the API Tool Configuration component, specifically affecting the ListApiToolsTask.start function in the ListApiToolsTask.java file. An attacker can trigger the SSRF rem...

[SECURITY] [DLA 4832-1] nagios4 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4832-1 [email protected] https://www.debian.org/lts/security/ Russell Stuart October 13, 2026 https://wiki.debian.org/LTS -...

EUVD-2026-98067

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2026-108939

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-110100: Missing Authorization

Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Axios vulnerabilities (USN-8638-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8638-1 advisory. Ameer Assadi discovered that Axios did not properly handle certain hostnames when applying NOPROXY rules. An attacker...

PT-2026-111844

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

PT-2026-112339

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-111415

Name of the Vulnerable Software and Affected Versions conductor-oss conductor version 3.22.0 Description An issue exists in the MCP Service component within the MCPService.listTools function. A remote attacker can perform server-side request forgery SSRF—a technique that allows an attacker to...

CVE-2026-108939 EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108939

The EricLBuehler mistral.rs library (versions up to 0.9.3 ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists in the is_global_ip function within the mistralrs-server-core/src/media_source.rs file, where manipulation of the ip argument allows for remote exploita...

CVE-2026-108939 EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the absence of CSRF protection on state-changing endpoints when OAuth cookie-based authentication is in use. An attacker can trick an authenticated user into visiting a malicious page that issues forg...

CVE-2022-51020

Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrfcookies is disabled and the OAuth session cookie lacks SameSite. Attackers can lure authenticated users to malicious pages that POST to /api/worker/shutdown, /api/worker/pool/restart, or /api/task/revoke t...

[SECURITY] [DSA 6556-1] nagios4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6556-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2026 https://www.debian.org/security/faq -...

CVE-2026-41504 OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...

CVE-2026-41504

The OWASP Coraza WAF library (versions 3.0.0 through 3.7.0 ) is vulnerable to CRLF injection within its Native audit-log formatter. Specifically, the file internal/auditlog/formats.go fails to neutralize carriage returns ( ) and line feeds ( ) in attacker-influenced request/response bodies, heade...

CVE-2026-41504 OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...

CVE-2026-109423

The NetEase Cloud Music client for Windows (cloudmusic.exe ) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability . The software fails to validate the server certificate chain, verify the hostname, or consult the Windows certificate trust store. A network-adjacent...

CVE-2026-89140 Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state

Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alter Scheduler V2 schedule state in another namespace. The callback address temporal://internal is reserved for callback...