CVE-2026-18730 Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

CVE-2026-18730 Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

CVE-2026-18730

This is a server-side request forgery (SSRF) vulnerability in GitHub Enterprise Server affecting the Manage API . An unauthenticated endpoint parsed an attacker-supplied cluster configuration and issued gateway-to-agent requests whose HMAC authenticated only a timestamp , not the request path or ...

CVE-2026-84371

creationtimestamp| type| source ---|---|--- 2026-09-01 21:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/brv6imqhpe426 2026-09-01 22:35:05+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-g8qq-57p8-ggw5 2026-09-02...

GHSA-M4RF-3FR8-XWX3

creationtimestamp| type| source ---|---|--- 2026-09-01 21:31:43+00:00| seen| https://gist.github.com/alon710/d77c44365a5d967f73ae86db10f23480...

CVE-2026-12841

creationtimestamp| type| source ---|---|--- 2026-09-01 21:31:43+00:00| seen| https://gist.github.com/alon710/d77c44365a5d967f73ae86db10f23480...

CVE-2026-68947

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9...

CVE-2026-68946

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:19+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-f4gw-2p7v-4548...

CVE-2026-69123

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:14+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-7q8q-rj6j-mhjq...

CVE-2026-69124

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:12+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9...

CVE-2026-58191

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:09+00:00| published-proof-of-concept| https://github.com/appium/appium/security/advisories/GHSA-3wgp-x9p5-c7cc 2026-09-14 21:00:06+00:00| confirmed|...

CVE-2026-73086

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:05+00:00| published-proof-of-concept| https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w 2026-09-05 00:14:08+00:00| seen| https://gist.github.com/djlan/55a70e34ef3841f55902bda07048c6a5...

CVE-2026-73229

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:03+00:00| published-proof-of-concept| https://github.com/encode/django-rest-framework/security/advisories/GHSA-g47c-3xmw-q6m2...

GHSA-2M8G-3CMR-WG3W

creationtimestamp| type| source ---|---|--- 2026-09-01 20:33:07+00:00| seen| https://gist.github.com/alon710/25c48d25038e76519874ccf73ad1c753...

CVE-2026-73228

creationtimestamp| type| source ---|---|--- 2026-09-01 20:33:07+00:00| seen| https://gist.github.com/alon710/25c48d25038e76519874ccf73ad1c753...

GHSA-2RX9-3G3H-C2JV

creationtimestamp| type| source ---|---|--- 2026-09-01 20:22:11+00:00| seen| https://gist.github.com/alon710/a2faaa6c3e9fca4817597ff64b25df31...

GHSA-P44J-XRQG-4XRR

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:40+00:00| seen| https://t.me/hackingAttack/11108 2026-09-02 01:03:16+00:00| seen| https://t.me/hackingAttack/11108 2026-09-08 05:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/11108 2026-09-09 00:00:41+00:00|...

GHSA-V8P8-4W8F-QH34

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:34+00:00| seen| https://t.me/hackingAttack/14865 2026-09-02 01:03:09+00:00| seen| https://t.me/hackingAttack/14865 2026-09-08 01:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/14865 2026-09-09 00:00:47+00:00|...

GHSA-93XJ-8MRV-444M

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:31+00:00| seen| https://t.me/hackingAttack/17172 2026-09-02 01:03:05+00:00| seen| https://t.me/hackingAttack/17172 2026-09-07 22:00:06+00:00| seen| https://t.me/hackingAttack/17172 2026-09-08 00:00:10+00:00| seen|...

GHSA-M87F-9FVV-2MGG

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:24+00:00| seen| https://t.me/hackingAttack/23700 2026-09-02 01:02:56+00:00| seen| https://t.me/hackingAttack/23700 2026-09-07 16:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/23700 2026-09-08 00:00:39+00:00|...