Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/23 7:40 p.m.•48 views

CVE-2026-84721 Automation-controller: automation-controller: email notification backend allows ssrf via user-controlled smtp host/port (internal port-scan oracle, smtp password exfil)

A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the user-supplied SMTP host and port from a notification template directly to the SMTP client without validating that the target is not an...

6.4CVSS0.00171EPSS
SaveExploits0References3
Rows per page
Query Builder