EUVD-2026-56000

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery SSRF vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center...

CVE-2026-73160

Affected versions of cti-transmute contain an SSRF vulnerability in the /fetchmispevent and /mispsearchevents endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, loopback, link-local, or reserved IPs. However, ordinary domain...

WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Steven Julian in WordPress Plugin Vehica Core versions = 1.0.104...

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

GHSA-9XWG-3R6F-JCX2 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-GM37-52C6-37MW vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-66777 Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resourc...

CVE-2026-66777 Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, an attacker with low privileges could send specially crafted requests to bypass authorization checks and reach protected resourc...

CVE-2026-66777

SAP Approuter in SAP Business AI Platform is affected by vulnerabilities where incoming requests are not sufficiently validated before being forwarded to backend destinations. An attacker with low privileges could craft requests to bypass authorization and access protected resources beyond their ...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

PT-2026-70763

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-70062

Name of the Vulnerable Software and Affected Versions mcp-grafana versions prior to 1.1.0 Description An authentication bypass allows unauthenticated attackers to use self-generated session IDs to gain access to the server's Grafana service account. This can be chained with a server-side request...

PT-2026-70152

Name of the Vulnerable Software and Affected Versions OpenShift Console affected versions not specified Description A Server-Side Request Forgery SSRF and supply chain flaw exists in the OpenShift Console Helm catalog proxy. A namespace tenant can create a ProjectHelmChartRepository using an...

CVE-2026-58248: Improper Restriction of XML External Entity Reference

SAP BusinessObjects Business Intelligence Platform Web Intelligence allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references. When the file is processed as a data source, the affected component resolves these references and exposes t...

PT-2026-70697

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make...

PT-2026-70107

Name of the Vulnerable Software and Affected Versions Command Center affected versions not specified Description A legacy endpoint in Command Center contains an unauthenticated server-side request forgery SSRF flaw. This issue occurs due to the improper handling of arbitrary target URLs, which...

CVE-2026-73235: Improper Restriction of XML External Entity Reference

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...

Grafana MCP server-side request forgery via X-Grafana-URL header (grafana_api_request)

A caller who can invoke the grafanaapirequest tool can supply an X-Grafana-URL request header to control the destination of mcp-grafana's outbound requests, and can also choose the HTTP method, path, and body. Because the destination isn't restricted to the configured Grafana instance, the caller...

PT-2026-70265

Genkit does not properly validate host request headers. Any host on the developer's network, and any website the developer visits via DNS rebinding, can reach POST /api/runAction on the Dev UI server default port 4000 and execute any registered Genkit action and read the result. Fixed on 2026-06-...