CVE-2026-101300 | | | 2026-10-16 | Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a… |
CVE-2026-111210 | High | 7.3 | 2026-10-16 | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Req… |
CVE-2026-111323 | Medium | 5.3 | 2026-10-15 | RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url… |
CVE-2026-111321 | Medium | 5.4 | 2026-10-15 | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP reques… |
CVE-2026-111320 | Medium | 6.5 | 2026-10-15 | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setti… |
CVE-2026-111313 | Medium | 6.5 | 2026-10-15 | JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unaut… |
CVE-2026-94621 | Medium | 6.3 | 2026-10-15 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supp… |
CVE-2026-111171 | Medium | 5.4 | 2026-10-15 | Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-m… |
CVE-2026-55875 | Medium | 4.3 | 2026-10-15 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /… |
CVE-2026-55414 | Medium | 5.3 | 2026-10-15 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizatio… |
CVE-2026-78850 | Medium | 5.0 | 2026-10-15 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component |
CVE-2026-57569 | | | 2026-10-15 | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in ap… |
CVE-2026-110812 | Critical | 9.9 | 2026-10-15 | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard d… |
CVE-2026-39989 | | | 2026-10-15 | A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then explo… |
CVE-2026-18660 | | | 2026-10-15 | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through t… |
CVE-2026-3712 | High | 7.3 | 2026-10-15 | The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service… |
CVE-2026-110868 | High | 8.5 | 2026-10-14 | Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs v… |
CVE-2026-0311 | | | 2026-10-14 | A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network re… |
CVE-2026-55385 | Medium | 6.8 | 2026-10-14 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, Inv… |
CVE-2026-55787 | High | 7.1 | 2026-10-14 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_private_ip in src/core/utils.py compare res… |
CVE-2026-102354 | Medium | 6.8 | 2026-10-14 | BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety… |
CVE-2026-76083 | | | 2026-10-14 | Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py used _get… |
CVE-2026-77524 | Critical | 9.9 | 2026-10-14 | KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication an… |
CVE-2026-110719 | High | 7.2 | 2026-10-14 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docke… |
CVE-2026-110718 | Medium | 5.9 | 2026-10-14 | TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch intern… |
CVE-2026-78231 | | | 2026-10-14 | When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endp… |
CVE-2026-25946 | Medium | 5.3 | 2026-10-14 | When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal ne… |
CVE-2026-110628 | High | 8.6 | 2026-10-14 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix f… |
CVE-2026-110610 | Medium | 5.4 | 2026-10-14 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to make… |
CVE-2026-110652 | Medium | 4.0 | 2026-10-14 | ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows… |
CVE-2026-85345 | Medium | 4.1 | 2026-10-14 | The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an… |
CVE-2026-95634 | High | 8.6 | 2026-10-13 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue… |
CVE-2026-76001 | High | 7.1 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit… |
CVE-2026-75748 | High | 7.6 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could… |
CVE-2026-34634 | High | 8.6 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not req… |
CVE-2026-34633 | High | 7.7 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit… |
CVE-2026-106622 | Critical | 10.0 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not req… |
CVE-2026-105897 | High | 8.6 | 2026-10-13 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not req… |
CVE-2026-96204 | Medium | 6.5 | 2026-10-13 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. |
CVE-2026-88206 | High | 7.5 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-70259 | Medium | 6.5 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
CVE-2026-70251 | High | 7.5 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-70202 | High | 7.5 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
CVE-2026-110255 | High | 8.5 | 2026-10-13 | Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch… |
CVE-2026-110254 | Medium | 4.3 | 2026-10-13 | Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to… |
CVE-2026-110240 | Medium | 4.8 | 2026-10-13 | Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition… |
CVE-2026-110225 | Low | 2.7 | 2026-10-13 | Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fe… |
CVE-2026-110223 | Low | 3.1 | 2026-10-13 | Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebi… |
CVE-2026-110222 | Medium | 5.3 | 2026-10-13 | Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafte… |
CVE-2026-110220 | High | 7.1 | 2026-10-13 | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount… |
CVE-2026-105713 | Medium | 5.7 | 2026-10-13 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. |
CVE-2026-104817 | | | 2026-10-13 | Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-si… |
CVE-2026-107460 | | | 2026-10-13 | Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed thro… |
CVE-2024-34319 | Medium | 6.5 | 2026-10-13 | A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to mak… |
CVE-2026-65170 | High | 8.6 | 2026-10-13 | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery… |
CVE-2026-65101 | High | 8.6 | 2026-10-13 | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a cr… |
CVE-2026-109405 | High | 7.3 | 2026-10-13 | A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/j… |
CVE-2026-109404 | Medium | 5.3 | 2026-10-13 | A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.j… |
CVE-2026-109403 | High | 7.3 | 2026-10-13 | A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/s… |
CVE-2026-109402 | Medium | 6.3 | 2026-10-13 | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conduc… |
CVE-2026-109190 | Medium | 6.3 | 2026-10-13 | A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the com… |
CVE-2026-109189 | Medium | 6.3 | 2026-10-13 | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the f… |
CVE-2026-100104 | Low | 3.5 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c… |
CVE-2026-89111 | Critical | 10.0 | 2026-10-13 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain param… |
CVE-2026-108939 | Medium | 5.3 | 2026-10-13 | A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source… |
CVE-2026-109651 | Medium | 4.3 | 2026-10-12 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common… |
CVE-2026-109603 | Low | 3.3 | 2026-10-12 | Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side r… |
CVE-2026-109378 | Medium | 4.3 | 2026-10-12 | SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that follows up to 10 redirects without re… |
CVE-2026-85471 | Medium | 6.4 | 2026-10-12 | A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Requ… |
CVE-2026-57143 | High | 8.8 | 2026-10-12 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_ur… |
CVE-2026-85963 | High | 7.5 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could a… |
CVE-2026-75888 | High | 7.7 | 2026-10-12 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a speciall… |
CVE-2026-109239 | Medium | 5.3 | 2026-10-12 | Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets unauthenticated attackers bypass Docker se… |
CVE-2026-109238 | High | 8.6 | 2026-10-12 | Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_c… |
CVE-2026-85952 | High | 8.5 | 2026-10-12 | Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability… |
CVE-2026-85951 | High | 8.5 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could a… |
CVE-2026-109200 | Medium | 6.4 | 2026-10-12 | LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet h… |
CVE-2026-93694 | Medium | 4.0 | 2026-10-12 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this beha… |
CVE-2026-93693 | Medium | 6.5 | 2026-10-12 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response fo… |
CVE-2026-108836 | High | 7.3 | 2026-10-12 | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API… |
CVE-2026-108787 | Medium | 6.3 | 2026-10-12 | A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the comp… |
CVE-2026-108786 | Medium | 6.3 | 2026-10-12 | A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of t… |
CVE-2026-108770 | Medium | 5.3 | 2026-10-11 | A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatar… |
CVE-2026-108850 | Medium | 5.3 | 2026-10-11 | Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by… |
CVE-2026-108735 | Medium | 4.3 | 2026-10-11 | Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed… |
CVE-2026-108719 | Medium | 5.0 | 2026-10-11 | LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generati… |
CVE-2026-108572 | Medium | 4.3 | 2026-10-11 | A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the c… |
CVE-2026-108542 | Medium | 6.3 | 2026-10-11 | A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the compo… |
CVE-2026-108523 | Medium | 4.3 | 2026-10-11 | A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git… |
CVE-2026-108521 | Medium | 4.7 | 2026-10-11 | A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/vali… |
CVE-2026-62030 | High | 7.2 | 2026-10-10 | Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions. |
CVE-2026-27350 | High | 7.2 | 2026-10-10 | Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery.
This issue affects Builderius: from 1.4 throu… |
CVE-2026-108602 | Medium | 4.3 | 2026-10-10 | Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to… |
CVE-2026-108594 | Low | 3.5 | 2026-10-10 | Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the i… |
CVE-2026-108583 | Medium | 4.2 | 2026-10-10 | zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_… |
CVE-2026-108554 | Medium | 5.3 | 2026-10-10 | PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch ar… |
CVE-2026-108115 | Medium | 4.9 | 2026-10-10 | Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplyin… |
CVE-2026-101022 | Medium | 4.3 | 2026-10-09 | A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An… |
CVE-2026-78027 | Medium | 5.8 | 2026-10-09 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged… |
CVE-2026-78024 | High | 7.7 | 2026-10-09 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged… |