23227 matches found
CVE-2026-92932: Server-Side Request Forgery (SSRF)
In the MISP sachertortephp library, the Xml::build static method in lib/Cake/Utility/Xml.php contains a logic error in the conditional that gates network-based XML fetching. The original condition was written as: $options'readFile' && strpos$input, 'http://' === 0 || strpos$input, 'https://' === ...
CVE-2026-54546: Server-Side Request Forgery (SSRF)
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint passes an attacker-controlled URL through importBasemapURL in api/routes/basemap.ts to fetchurl without resolved-address...
CVE-2026-81443: Server-Side Request Forgery (SSRF)
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-66608: Server-Side Request Forgery (SSRF)
Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...
PT-2026-94339
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description A Server-Side Request Forgery SSRF issue exists where a low privileged attacker with remote access could potentially exploit the system to induce the server to make...
Fedora 43 : roundcubemail (2026-821349f438)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-821349f438 advisory. Release 1.6.19 - Fix PHP Warning: Undefined variable $tmpcommand in .../plugins/markasjunk/drivers/cmdlearn.php 10294 - Security: Fix CSS declaration smuggli...
PT-2026-94341
Name of the Vulnerable Software and Affected Versions SmallRye JWT affected versions not specified Description A flaw exists in the AwsAlbKeyResolver of SmallRye JWT, used for verifying JSON Web Tokens signed by AWS Application Load Balancers. When the AWS ALB key provider is active, the resolver...
CVE-2026-93384: Server-Side Request Forgery (SSRF)
Server-side request forgery in Omnibox in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
PT-2026-95176
Name of the Vulnerable Software and Affected Versions Azure AI Foundry affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server-side application to make...
CVE-2026-85917: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
PT-2026-95048
Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at / og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...
PT-2026-94364
Name of the Vulnerable Software and Affected Versions nuxt-og-image versions 6.0.2 through 6.6.x Description An unauthenticated Server-Side Request Forgery SSRF exists when the software is used with default security settings security.strict = false and security.secret = "". The application expose...
PT-2026-95142
Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description The oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl. The validateUrl function in system/functions.php only checks the...
CVE-2026-54507: Server-Side Request Forgery (SSRF)
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, the oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl, while validateUrl in system/functions.php...
PT-2026-95100
Name of the Vulnerable Software and Affected Versions Glean versions prior to 0.2.6 Description An issue exists where the application fails to perform network-level validation on URLs provided in RSS feeds. When a user submits a feed url via the 'POST /api/feeds/discover' endpoint, the system...
PT-2026-94351
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An unauthenticated attacker with remote access can exploit a Server-Side Request Forgery SSRF flaw. SSRF is a vulnerability that allows an attacker to induce the...
CVE-2026-81446: Server-Side Request Forgery (SSRF)
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
VulnCheck KEV: CVE-2026-40242
Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...
VulnCheck KEV: CVE-2026-32255
Kan is an open-source project management tool. In versions 0.5.4 and below, the /api/download/attatchment endpoint has no authentication and no URL validation. The Attachment Download endpoint accepts a user-supplied URL query parameter and passes it directly to fetch server-side, and returns the...