共收录 2014 条相关情报。
← 返回所有主题CVE-2026-67077
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the ap
CVE-2026-115225
The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group l
CVE-2026-118376
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-p
CVE-2026-118376
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-p
CVE-2026-116686
### Summary In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client va
CVE-2026-116686
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.
CVE-2026-116680
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wi
CVE-2026-116678
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader v
CVE-2026-116680
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wi
CVE-2026-116678
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader v
CVE-2026-87897
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentic
CVE-2026-117565
Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers
CVE-2026-65120
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e
CVE-2026-24269
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful e
CVE-2026-56084
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7
CVE-2026-117471
Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo devic
CVE-2026-116827
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() f
CVE-2026-116826
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all
CVE-2026-116826
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that all
CVE-2026-116280
A vulnerability was determined in Kameleo up to 5.0.1.26. Affected is the function InternalController.TestProxy of the f