共收录 2015 条相关情报。
← 返回所有主题CVE-2026-12944
IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0)
CVE-2026-90818
A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the f
CVE-2026-12767
IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthentic
CVE-2026-12766
IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
CVE-2026-12765
IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthentic
CVE-2026-90814
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function git
CVE-2026-73497
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0
CVE-2026-15887
IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requ
CVE-2026-90446
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path o
CVE-2026-90446
CVE-2026-90446 描述的是一类典型的服务端请求路径注入问题，可视为 SSRF 的变体。受影响应用的某个 API 端点会接收用户可控的输入值，并在未做内容校验或白名单限制的情况下，将其直接拼接进发往后端搜索与分析数据存储（如 El
CVE-2026-59973
## Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI exte
CVE-2026-54166
Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` p
CVE-2026-49865
Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain a server-side request forgery vulner
CVE-2026-89242
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability
CVE-2026-19486
A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions
CVE-2026-82097
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
CVE-2026-81207
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully
CVE-2026-81265
IBM Langflow OSS 1.0.0 through 1.11.5.
CVE-2026-81213
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal networ
CVE-2026-79723
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to