CVE-2026-125926

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

CVE-2026-125926

A Server-side request forgery (SSRF) vulnerability exists in the server registration and update API of Amazon mcp-gateway-registry versions prior to 1.35.0 . This flaw may allow an authenticated remote user to submit a crafted request that forces the gateway to send requests to internal network s...

CVE-2026-125926 Server-side request forgery in the server registration and update API in mcp-gateway-registry

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

CVE-2026-125926

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

EUVD-2026-124011

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

CVE-2026-125926: AWS mcp-gateway-registry: Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before…

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

PT-2026-145450

Server-side request forgery SSRF in the server registration and update API in Amazon mcp-gateway-registry before 1.35.0 might allow an authenticated remote user to send requests from the gateway to internal network services and cloud instance metadata endpoints and read the responses via a crafte...

Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery in Dynamic Client Registration

Summary IBM ContextForge MCP Gateway includes a Dynamic Client Registration DCR feature that automatically discovers and registers OAuth 2.0 clients by fetching authorization server metadata. The registrationendpoint URL obtained from that metadata is posted to without being passed through the...

CVE-2026-102095

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs contained in the message content it processed, without adequately restricting the fetch destination. A remote,...

EUVD-2026-90377

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs contained in the message content it processed, without adequately restricting the fetch destination. A remote,...

CVE-2026-102095 Kiteworks Email Protection Gateway server-side request forgery

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs contained in the message content it processed, without adequately restricting the fetch destination. A remote,...

CVE-2026-102095 Kiteworks Email Protection Gateway server-side request forgery

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs contained in the message content it processed, without adequately restricting the fetch destination. A remote,...

PT-2026-103533

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0 Description An issue exists where the system performs server-side fetches of URLs found within processed message content without sufficient destination restrictions. This allows a...

CVE-2026-102095: Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Protection Gateway performed server-side fetches of URLs contained in the message content it processed, without adequately restricting the fetch destination. A remote,...