CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those...

CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those...

CVE-2026-114493

LocalAI versions v4.6.0 through v4.11.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the core/gallery/gallery.go component. The root cause is that the application only validates the initial gallery configuration URL. An attacker can submit a configuration URL via PO...

CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those...

EUVD-2026-107402

Airbyte OneDrive Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. T...

CVE-2026-92204

The Airbyte OneDrive Connector is vulnerable to a Server-Side Request Forgery (SSRF) and Information Disclosure vulnerability in the _get_shared_drive_object method. The root cause is a lack of proper validation of a URI before the application accesses resources. This flaw allows an authenticated...

CVE-2026-92204 Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Airbyte OneDrive Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. T...

CVE-2026-92204

Airbyte OneDrive Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. T...

CVE-2026-92203 Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Airbyte SharePoint Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability...

EUVD-2026-107401

Airbyte SharePoint Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability...

CVE-2026-92203

Airbyte SharePoint Connector getshareddriveobject Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability...

CVE-2026-92203

The Airbyte SharePoint Connector is vulnerable to a Server-Side Request Forgery (SSRF) information disclosure vulnerability within the _get_shared_drive_object method. The root cause is a lack of proper validation of a URI before the application accesses resources. An authenticated remote attacke...

CVE-2026-92210

The NoMachine nxhtd service is vulnerable to a Server-Side Request Forgery (SSRF) and information disclosure vulnerability. The flaw resides in the web service , which listens on UDP port 4443 by default, due to a lack of proper URI validation before accessing resources. A remote attacker can exp...

CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

EUVD-2026-107399

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

PHPOffice PhpSpreadsheet input validation error vulnerability

PHPOffice PhpSpreadsheet versions 1.30.7, 2.1.19, 2.4.8, 3.10.8, and earlier versions prior to 5.10.0 contain a security vulnerability. This vulnerability arises because the DOCTYPE detection mechanism in XmlScanner::scan fails to account for ISO-2022 escaped sequences within XLSX XML sections. A...

PHPOffice PhpSpreadsheet input validation error vulnerability

A security vulnerability exists in PHPOffice PhpSpreadsheet versions prior to 3.10.8 and 4.0.0 up to 5.10.0. This vulnerability stems from improper entity decoding of SpreadsheetML XML by Reader\Xml. The double-encoded “” becomes a literal “” after two callbacks, allowing SimpleXML to receive...

Exploit for CVE-2026-105482

CVE-2026-105482 – Node.js dns.resolve NUL byte truncation...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities indompurify, axios, and i18next-http-backend. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-105800 DESCRIPTION: i18next-http-backend is a backend layer for i18next...

Security Bulletin: CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities (CVE-2026-18546, CVE-2026-18893)

Summary CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities CVE-2026-18546, CVE-2026-18893 Vulnerability Details CVEID:CVE-2026-18546 DESCRIPTION: CockroachDB PostgreSQL for IBM VPC is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker ...