CVE-2026-127093

Rustrak versions prior to 0.26.0 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw exists within the Alert Integration Test functionality, where users with integrations update permissions can trigger requests to arbitrary destinations by providing a routing_override.url parameter ...

EUVD-2026-125090

Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update permission to send requests to arbitrary destinations by supplying routingoverride.url to POST /api/integrations/id/test. Attackers can target loopback, private-network and cloud...