CVE-2026-4786

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

PSF-2026-17

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

CVE-2026-6220

HummerRisk up to 1.5.0 is affected in ServerService.addServer (ServerService.java, Video File Download URL Handler). Manipulating the argument streamIp enables server-side request forgery; remote exploitation is possible and a public exploit exists. Vendor was contacted but did not respond. No re...

CVE-2026-6220 HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery

A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File Download URL Handler. Such manipulation of the argument streamIp leads to server-side request forgery. It is possibl...

EUVD-2026-22083

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side Request Forgery SSRF via a DNS rebinding TOCTOU condition. Host validation uses dnsgetrecord but the actual HTTP...

CVE-2026-33659

EspoCRM 9.3.3 and earlier are affected by SSRF via POST /api/v1/Attachment/fromImageUrl (and fromImageUrl) due to a DNS rebinding (TOCTOU) flaw. Host validation uses dns_get_record(), but the actual HTTP request resolves with curl’s internal resolver (gethostbyname()), allowing mismatched IP look...

CVE-2026-33659

EspoCRM is an open source customer relationship management application. In versions 9.3.3 and below, the POST /api/v1/Attachment/fromImageUrl endpoint is vulnerable to Server-Side Request Forgery SSRF via a DNS rebinding TOCTOU condition. Host validation uses dnsgetrecord but the actual HTTP...

CVE-2026-40043

creationtimestamp| type| source ---|---|--- 2026-04-13 20:21:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfowf2uza23...

CVE-2026-33534

EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated Server-Side Request Forgery SSRF vulnerability that allows bypassing the internal-host validation logic by using alternative IPv4 representations such as octal notation e.g.,...

CVE-2026-6215 DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file packages/rest/src/openApiDriver.ts of the component REST/GraphQL. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been...

CVE-2026-6215 DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file packages/rest/src/openApiDriver.ts of the component REST/GraphQL. This manipulation causes server-side request forgery. The attack may be initiated remotely. The exploit has been...

CVE-2026-39922

GeoNode versions 4.4.5 and 5.0.2 and prior within their respective releases contain a server-side request forgery vulnerability in the service registration endpoint that allows authenticated attackers to trigger outbound network requests to arbitrary URLs by submitting a crafted service URL durin...

CVE-2026-40193

creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:52+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5835-4gvc-32pc 2026-04-16 02:37:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjlevqkn5e2o 2026-04-16 14:05:00+00:00| seen|...

CVE-2026-40040

creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjflocwdbf2s 2026-04-13 20:31:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpjenntu2m 2026-04-13 21:22:40+00:00| seen|...

CVE-2026-40044

creationtimestamp| type| source ---|---|--- 2026-04-13 19:22:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjflo35gmq27 2026-04-13 20:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfoowynqs2t 2026-04-13 21:22:40+00:00| seen|...

EUVD-2026-22034

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of...

CVE-2026-36944

creationtimestamp| type| source ---|---|--- 2026-04-13 18:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfie5xq5r2r...

CVE-2026-6194

A weakness has been identified in Totolink A3002MU B20211125.1046. Affected by this vulnerability is the function sub410188 of the file /boafrm/formWlanSetup of the component HTTP Request Handler. This manipulation of the argument wan-url causes stack-based buffer overflow. Remote exploitation of...

CVE-2026-36945

creationtimestamp| type| source ---|---|--- 2026-04-13 18:13:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhsspjxi2m...

CVE-2026-34186

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:48+00:00| seen| Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk 2026-04-13 18:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfiwag32l2m...