共收录 2014 条相关情报。
← 返回所有主题CVE-2026-28329
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that
CVE-2026-111761
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSend
CVE-2026-105941
The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes withou
CVE-2026-107597
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer
CVE-2026-112237
The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method,
CVE-2026-8355
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe
CVE-2026-112358
A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af
CVE-2026-8355
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe
CVE-2026-112991
The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its
CVE-2026-112358
A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability af
CVE-2026-112299
A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function
CVE-2026-108764
Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly
CVE-2026-102923
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/
CVE-2026-111210
A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSe
CVE-2026-111323
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraf
CVE-2026-111321
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make
CVE-2026-111313
JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler th
CVE-2026-111320
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attack
CVE-2026-77524
## Summary A namespace admin who creates a `TriggerAuthentication` and a `ScaledObject` in their own namespace can make
CVE-2026-110868
Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP c