CVE-2026-107698

FFmpeg versions before 7.1.4 and 8.0.x before 8.0.2 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the ff_rtsp_connect() function in libavformat/rtsp.c . The root cause is that the software follows RTSP 3xx redirects without validating the Location URL . This allows a...

CVE-2026-103287: Server-Side Request Forgery (SSRF)

Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staff privileges can craft webhook requests to access internal network resources from the Ghost server...

PT-2026-103819

Name of the Vulnerable Software and Affected Versions Ghost versions 1.18.0 through 6.26.0 Description A server-side request forgery SSRF issue exists in the webhooks feature. This allows users with staff privileges to craft requests that enable the Ghost server to probe and access internal netwo...

Server-Side Request Forgery (SSRF)

jackson-databind is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to InetAddress.getByName resolving attacker-controlled input, which allows an attacker to trigger DNS requests from the server and probe or identify internal hosts...

CVE-2026-91967 AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL

AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues getheaders calls guarded only by format validation. Authenticated users with canUpload permission can store attacker-chosen URLs as video links, triggering...

EUVD-2026-78643

AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues getheaders calls guarded only by format validation. Authenticated users with canUpload permission can store attacker-chosen URLs as video links, triggering...

PT-2026-92086

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.1 Description A blind server-side request forgery exists in the getHeaderContentTypeFromURL function, which performs get headers calls that are only protected by format validation. Authenticated users with canUpload...

CVE-2026-76361 Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../checkconnectivity endpoint to make Splunk SOAR initiate outbound network connections to arbitrary destinations and determine whether internal hosts and ports are reachable. The...

PT-2026-73283

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on...

bounthunt

Bountyhunt !CIhttps://github.com/bess1lie/bountyhunt/acti...

Mozilla: Internal network hosts could have been probed by a malicious webpage

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...