146579 matches found
CVE-2026-32037 OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling
OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls...
CVE-2026-32037 OpenClaw < 2026.2.22 - Redirect Chain Bypass of Media Host Allowlist in MSTeams Attachment Handling
OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls...
EUVD-2026-13322
OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls...
CVE-2026-32037
OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls...
EUVD-2026-13206
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
EUVD-2026-13186
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-13180
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-13184
Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows an authorized attacker to elevate privileges over a network...
CVE-2026-32194 Microsoft Bing Images Remote Code Execution Vulnerability
...
CVE-2026-32194
CVE-2026-32194 affects Microsoft Bing Images and is described as an instance of improper neutralization of command elements leading to remote code execution. The connected sources consistently identify command injection as the root cause affecting Microsoft Bing Images, with high-severity impact ...
CVE-2026-32194 Microsoft Bing Images Remote Code Execution Vulnerability
...
CVE-2026-32191
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
CVE-2026-26139
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26138
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26137
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26120
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...