CVE-2026-92204

The Airbyte OneDrive Connector is vulnerable to a Server-Side Request Forgery (SSRF) and Information Disclosure vulnerability in the _get_shared_drive_object method. The root cause is a lack of proper validation of a URI before the application accesses resources. This flaw allows an authenticated...

EUVD-2026-107402

Airbyte OneDrive Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. T...

CVE-2026-92203

The Airbyte SharePoint Connector is vulnerable to a Server-Side Request Forgery (SSRF) information disclosure vulnerability within the _get_shared_drive_object method. The root cause is a lack of proper validation of a URI before the application accesses resources. An authenticated remote attacke...

EUVD-2026-107401

Airbyte SharePoint Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability...

EUVD-2026-107399

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-92210

The NoMachine nxhtd service is vulnerable to a Server-Side Request Forgery (SSRF) and information disclosure vulnerability. The flaw resides in the web service , which listens on UDP port 4443 by default, due to a lack of proper URI validation before accessing resources. A remote attacker can exp...

Exploit for CVE-2026-105482

CVE-2026-105482 – Node.js dns.resolve NUL byte truncation...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-105800 DESCRIPTION: i18next-http-backend is a backend layer for i18next...

Security Bulletin: CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities (CVE-2026-18546, CVE-2026-18893)

Summary CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities CVE-2026-18546, CVE-2026-18893 Vulnerability Details CVEID:CVE-2026-18546 DESCRIPTION: CockroachDB PostgreSQL for IBM VPC is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker ...

A2A Java SDK Has Server-Side Request Forgery (SSRF) In Push-notification Delivery

- Ecosystem: Maven - Affected package: "org.a2aproject.sdk:a2a-java-sdk-server-common" push-notification delivery - Affected versions: "= 1.2.0.Final" and "1.2.1.Final-SNAPSHOT" on "main" prior to the fix - Patched version: the release that carries the fix - CWE: CWE-918 Server-Side Request...

htb-nimbus-poc

HTB · Nimbus — PoC Proof-of-concept per la macchina Nimbus...

Exploit for CVE-2026-88901

CVE-2026-88901 — camel-smooks: XML External Entity XXE proce...

CVE-2026-17557

A flaw was found in the lm-evaluation-harness component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the JobSpec. This vulnerability allows for the disclosure of the tenant's model authentication secret ...

CVE-2026-17557

A vulnerability exists in the lm-evaluation-harness component of Red Hat OpenShift AI . An authenticated user capable of submitting evaluation jobs can exploit this by providing a malicious model URL in the JobSpec . This flaw allows for the disclosure of the tenant's model authentication secret ...

CVE-2026-17557

A flaw was found in the lm-evaluation-harness component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the JobSpec. This vulnerability allows for the disclosure of the tenant's model authentication secret ...

EUVD-2026-107135

A flaw was found in the lm-evaluation-harness component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the JobSpec. This vulnerability allows for the disclosure of the tenant's model authentication secret ...

CVE-2026-17557 Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

A flaw was found in the lm-evaluation-harness component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the JobSpec. This vulnerability allows for the disclosure of the tenant's model authentication secret ...

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell. The vulnerabilities are listed below -...

CVE-2026-114080

Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidated alert-channel webhook URLs. Attackers can create alert channels pointing to loopback, internal, or cloud metadata...

CVE-2026-114076

Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts by setting an unvalidated webhook alert channel URL. Attackers can point the webhook at internal services or cloud...