EUVD-2026-97555

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticated remote attacker to make unauthorized requests to internal services or forge trusted requests, potentially resultin...

CVE-2026-85960

Progress MarkLogic Server (12.x before 12.1.0 and 11.x before 11.3.7) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the Query Console due to the use of predictable CSRF tokens. A remote attacker could trick an authenticated user into visiting a malicious page to submit unauthorized...

CVE-2026-109346 better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device

better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then...

CVE-2026-109346

better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting clientid and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then...

EUVD-2026-97621

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via...

CVE-2026-109319

Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Authenticated Admin users lacking the admin.guestbook permission, or external sites abusing a moderator's session via...

EUVD-2026-97682

Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling linkpreviewconfig on /crawl requests. Attackers can supply a controlled page with includeexternal and includepatterns set, causing AsyncUrlSeeder to fet...

CVE-2026-109238

Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling linkpreviewconfig on /crawl requests. Attackers can supply a controlled page with includeexternal and includepatterns set, causing AsyncUrlSeeder to fet...

ProPhoenix Law Records Management Software security vulnerabilities

The ProPhoenix Law Records Management Software version v2022.2403.3.101 contains a security vulnerability stemming from server-side request forgery in the serviceURL parameter. This vulnerability may allow attackers to force the application server to initiate unintended DNS and web requests via...

Razorpay IFSC server-side request forgeing vulnerability

Razorpay IFSC 2.0.62 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from server-side request forgeing, where attackers can submit specially crafted IFSC codes to IFSC.find or IFSC, along with network path references or absolute URIs. These URIs ar...

Shaarli Community: Shaarli Server Request Forgery Vulnerability

The Shaarli Community version 0.16.9 and earlier contain a server-side request forgeing vulnerability. This vulnerability stems from server-side request forgeing, where private addresses are not checked during the retrieval of bookmark thumbnails. Certified users can manipulate server requests to...

Kubeflow Hub server request forgery vulnerability

Kubeflow Hub versions 0.3.17 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from an issue with server-side request forgeing in the modelregistry.kubeflow.org/url annotation. It may allow namespace users to steal the controller ServiceAccount token. By...

CVE-2026-85951

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 deployed on Azure are vulnerable to a server-side request forgery (SSRF) (CWE-918). This vulnerability allows an authenticated attacker to access internal cloud services, which could lead to the unauthorized acquisition ...

RHLW-2026-E6D7B954CD8149D6 Lightwell Security Advisory: httpclient 4.5.12.rhlw-00001

Red Hat Lightwell has released org.apache.httpcomponents:httpclient 4.5.12.rhlw-00001 with a backported security fix. CVE-2020-13956: Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI...

CVE-2026-108836

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-108951

LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractRequest isWorkflow check. Attackers can send a PATCH request to the user update route with a target identifier to change...

CVE-2026-93694 Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content...

CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-108836 Ollama Pull API name.go IsValid server-side request forgery

A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to t...