CVE-2026-54734: Server-Side Request Forgery (SSRF)

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious actor who can supply bid-request parameters can...

Fortinet FortiSIEM 7.4.1 <= 7.4.2 / 7.5.0 <= 7.5.1 Open Redirect (FG-IR-26-169)

The version of Fortinet FortiSIEM running on the remote host is 7.4.1 through 7.4.2, or 7.5.0 through 7.5.1. It is, therefore, affected by a URL redirection to untrusted site vulnerability: - A URL redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM may allow an...

The vulnerability in the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Cisco Identity Services Engine ISE management platform is related to errors that occur when privileged application programming interfaces are used. Exploiting this vulnerability can allow a malicious actor to bypass existing securi...

PT-2026-94364

Name of the Vulnerable Software and Affected Versions nuxt-og-image versions 6.0.2 through 6.6.x Description An unauthenticated Server-Side Request Forgery SSRF exists when the software is used with default security settings security.strict = false and security.secret = "". The application expose...

CVE-2026-92583

AVideo through 29.0 contains a race condition in the enforceRateLimit function that fails to atomically increment rate limit counters, allowing attackers to bypass all rate limits including login brute-force protection by issuing concurrent requests. Attackers can submit parallel credential...

CVE-2026-76427

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...

CVE-2026-76427 Cisco ISE XML External Entity Injection Vulnerability

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...

CVE-2026-92568 MLRun through 1.11.0 Server-Side Request Forgery via Webhook

MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification handler that allows authenticated users to make the API server send arbitrary HTTP requests to internal addresses. Attackers can update a run with a malicious webhook notification that executes wh...

CVE-2026-92566

DataGear through 6.0.0 contains an unauthenticated server-side request forgery (SSRF) vulnerability in the /dataSet/preview/Http endpoint. By supplying a caller-controlled URI, an attacker can issue GET, POST, PUT, PATCH, or DELETE requests to internal services and cloud metadata endpoints, recei...

CVE-2026-19535

Nozomi Networks Labs identified a CWE-352 (Cross-Site Request Forgery) vulnerability in the LuCI administrative web interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote, unauthenticated attacker can perform unauthorized state-changing requests on beha...

CVE-2026-19535

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a...

CVE-2023-27163-AND-Mailtrail-v0.53

Automatic Exploit Summary The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command...

CVE-2026-78252

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

CVE-2026-78252

GitLab CE/EE versions from 15.3 before 19.1.8 , 19.2 before 19.2.6 , and 19.3 before 19.3.2 are affected by improper sanitization of user-controlled data in the Markdown JSON table renderer . Under certain conditions, an authenticated user could induce a targeted user to perform unintended state-...

CVE-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

CVE-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper...

CVE-2026-76559

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...

EUVD-2026-80183

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process, allowing users with the import capability, which administrators hold by default, to make the site issue requests to internal hosts and services and read their...

CVE-2026-92586: Missing Authorization

AVideo through 29.0 commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify video access permissions in the setapicomment function, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requests to the comment API endpoi...

PT-2026-93811

Name of the Vulnerable Software and Affected Versions DataGear versions prior to 6.0.1 Description An issue exists where unauthenticated attackers can execute arbitrary HTTP requests by providing a caller-controlled URI. This occurs via the '/dataSet/preview/Http' endpoint, allowing the issuance ...