CVE-2026-100705

A flaw was found in Kyverno. Due to missing egress network filtering in its legacy API call handler, an attacker with permission to author policies or submit templated resources can trigger Server-Side Request Forgery SSRF. This vulnerability allows the attacker to force Kyverno to issue arbitrar...

[SECURITY] [DLA 4800-1] glance security update

Debian LTS Advisory DLA-4800-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara September 29, 2026 https://wiki.debian.org/LTS Package : glance Version : 2:25.1.0-2+deb12u5 CVE ID : CVE-2026-71196 CVE-2026-71197 CVE-2026-71198 CVE-2026-77648 Debian Bug ...

CLEANSTART-2026-XY63591 Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly speci...

Security vulnerability affects the apache-hive package. Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and where the view name is not explicitly specified...

CLEANSTART-2026-BJ90324 Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4

Security vulnerability affects the spark-sc212-jdk17-py311 package. Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4...

PT-2026-102872

Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description A server-side request forgery SSRF issue exists in the API endpoint of the device. An authenticated remote attacker with high privileges can exploit this to execute...

CVE-2026-92222: Server-Side Request Forgery (SSRF)

Joomla! Core - 20260909 - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests were improperly validated, leading to SSRF vectors...

PT-2026-102526

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

PT-2026-102895

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download file and scrape web agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata...

HPESBNW05150 rev.1 - Multiple Vulnerabilities in HPE Networking Instant On APs

Potential Security Impact: Local: Access Restriction Bypass, Escalation of Privilege; Remote: Access Restriction Bypass, Code Execution, Denial of Service DoS, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Networking Instant On Access Points...

CVE-2026-102722: Server-Side Request Forgery (SSRF)

In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's 227 reply. Validation only covers the parse and the non-zero values, thus a malicious server can name any address and direct the Client there...

AlmaLinux 10 : cockpit-image-builder (ALSA-2026:71543)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:71543 advisory. fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75899 fast-uri: fast-uri: Server-side request forgery vi...

CVE-2026-100297: Server-Side Request Forgery (SSRF)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...

PT-2026-102695

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 4.0.0 through 5.4.8 Joomla! Core versions 6.0.0 through 6.1.3 Description Various core extensions contain Server-Side Request Forgery SSRF vectors. This occurs because URLs used for server-side requests are improperly...

CVE-2026-102877: Server-Side Request Forgery (SSRF)

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal...

PT-2026-102824

Name of the Vulnerable Software and Affected Versions Anjvision YSSD-RTMP-H5 version 3.3.2.4 Description Several ONVIF service endpoints process management requests without enforcing required authentication. This issue stems from the initialization of a resource with an insecure default, which...

Linux Distros Unpatched Vulnerability : CVE-2026-51772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled ...

PT-2026-102893

Name of the Vulnerable Software and Affected Versions Fider versions prior to 0.38.0 Description A server-side request forgery issue exists due to a time-of-check time-of-use TOCTOU gap—a race condition where a system checks a condition and then uses the result, but the condition changes between...

Debian dla-4800 : glance - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4800 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4800-1 [email protected]...

CVE-2026-76728: Undefined Security Weakness

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the...

CVE-2026-102879: Server-Side Request Forgery (SSRF)

ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the downloadfile and scrapeweb agent tools. Authenticated users can bypass hostname validation and IPv6 transition address filtering to make the server request internal services and cloud instance metadata...