CVE-2026-85161

AVideo (through commit c91b5975d) contains a Cross-Site Request Forgery (CSRF) vulnerability in removePoster.php . The endpoint lacks forbidIfNotPost or forbidIfInvalidToken checks, allowing an attacker to craft malicious image tags that, when viewed by an authenticated victim, issue GET requests...

EUVD-2026-70372

Server-Side Request Forgery SSRF vulnerability in the /ocsreports/?function=teleactivate endpoint due to insufficient validation of the HTTPSSERV and FILESERV parameters. An authenticated user with operator privileges can provide arbitrary values for these parameters, causing the OCS Inventory...

tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

A flaw was found in Apache Tomcat. This incorrect authorization vulnerability occurs within the FORM authentication process, allowing a user to bypass security constraints. This bypass enables unauthorized access to resources via a GET request, even when those resources are intended to be...

BIT-ELASTICSEARCH-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

...

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

...

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

...

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

...

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

...

EUVD-2026-70318

RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry of the enhanced message queue. This can cause a BCIIEC104 fatal write error, resulting in connection interruption and restart, and ultimate...

CVE-2026-74835

A flaw was found in the inets application HTTP server httpd. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted chunked request that fails to enforce a configured body-size limit. This can lead to memory exhaustion, causing a Denial of Service DoS on...

CVE-2026-73812

A flaw was found in the inets httpd server, part of Erlang/OTP. The server incorrectly processes HTTP requests that contain both Transfer-Encoding: chunked and Content-Length headers, failing to reject them or close the connection as required by RFC 9112 §6.1. When inets is deployed behind a...

SUSE CVE-2026-48932

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible IncomingMessage headers while piping the original body to a reused backend connection. Node.js can omit headers beyond maxHeadersCount /...

PT-2026-85139

Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...

PT-2026-85085

PlaywrightCapture contains a server-side request forgery SSRF vulnerability in its favicon retrieval functionality. When only global lookup is enabled, the application validates the initial favicon URL to prevent requests to localhost, loopback, or other non-public network addresses. However,...

PT-2026-84922

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery SSRF vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-85126

Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33. Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other...

PT-2026-85102

A critical security vulnerability was found in the LiteSpeed Cache plugin for WordPress, and you really need to patch it right now. This flaw, tracked as CVE-2026-84761 with a high severity rating of 7.2, lets unauthenticated hackers pull off Server-Side Request Forgery attacks. Basically, anyone...

CVE-2026-84238: Missing Authorization

Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...

PT-2026-84976

Name of the Vulnerable Software and Affected Versions OCS Inventory affected versions not specified Description An authenticated user with operator privileges can exploit a Server-Side Request Forgery SSRF issue. This occurs due to insufficient validation of the HTTPS SERV and FILE SERV parameter...