Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/09/23 7:40 p.m.13 views

CVE-2026-84721 Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

6.4CVSS
SaveExploits0References3
Rows per page
Query Builder