e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a ...

CVE-2026-43936

e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of

历史摘要 · 未重新核验 · NVD

Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is current...

CVE-2026-40564

Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Ku

历史摘要 · 未重新核验 · NVD

Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting red...

CVE-2026-45082

Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability

历史摘要 · 未重新核验 · NVD

With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro. This issue affects Apach...

CVE-2026-44598

With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vu

历史摘要 · 未重新核验 · NVD

Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or I...

CVE-2026-48843

Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) s

历史摘要 · 未重新核验 · NVD

instagrapi: Unsafe signup challenge path handling in instagrapi

instagrapi 是一个用于与 Instagram API 交互的 Python 库，其版本 2.6.9 之前存在不安全的路径处理漏洞。在 signup（注册）挑战流程中，服务器返回的 challenge 路径被直接用于构建后续请求 U

历史摘要 · 未重新核验 · GitHub Advisory

aiograpi: Unsafe signup challenge path handling

CVE-2026-47157

aiograpi 是一个用于与 Instagram API 交互的 Python 库，支持注册、登录等操作。在版本 0.9.10 之前，该库在处理注册挑战（signup challenge）时存在路径处理漏洞。攻击者可以通过篡改服务器返回的

历史摘要 · 未重新核验 · GitHub Advisory

Nezha Monitoring: RoleMember-reachable SSRF with full response-body reflection via POST /api/v1/notification

CVE-2026-46717

## Summary nezha's dashboard supports two user roles: `RoleAdmin` (Role==0) and `RoleMember` (Role==1). The notificatio

历史摘要 · 未重新核验 · GitHub Advisory

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads,...

CVE-2026-7798

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin f

历史摘要 · 未重新核验 · GitHub Advisory

The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request F...

CVE-2026-7798

CVE-2026-7798 是一个影响 WordPress 插件 FluentCRM（版本 2.9.87 及以下）的盲服务器端请求伪造（SSRF）漏洞。该漏洞存在于 'SubscribeURL' 参数中，未经身份验证的攻击者可以利用此参数发

历史摘要 · 未重新核验 · NVD

In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor...

CVE-2026-7890

In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-s

历史摘要 · 未重新核验 · GitHub Advisory

In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-side without validation enabling redirect-to-internal bypa...

CVE-2026-7890

In Concrete CMS 9.5.0 and below, the RSS Displayer block accepts a feed URL from any page editor and fetches it server-s

历史摘要 · 未重新核验 · NVD

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

CVE-2026-46678

## Summary When an application using Pydantic AI opts a URL into `force_download='allow-local'` (which disables the def

历史摘要 · 未重新核验 · GitHub Advisory

FlaskBB: SSRF in get_image_info() via unrestricted avatar URL

CVE-2026-46556

###Summary A Server-Side Request Forgery (SSRF) vulnerability in get_image_info() allows any authenticated user to force

历史摘要 · 未重新核验 · GitHub Advisory

NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)

CVE-2026-46548

### Summary The `request-filtering-agent` SSRF protection was non-functional in the four notification webhook plugins (

历史摘要 · 未重新核验 · GitHub Advisory

The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress...

CVE-2026-6394

The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server

历史摘要 · 未重新核验 · GitHub Advisory

The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to and includ...

CVE-2026-6394

The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server

历史摘要 · 未重新核验 · NVD

@angular/platform-server: SSRF via Hostname Hijacking

CVE-2026-46417

### Impact A Server-Side Request Forgery (SSRF) vulnerability exists in `@angular/platform-server`. The issue stems fro

历史摘要 · 未重新核验 · GitHub Advisory

SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

CVE-2026-46372

## Resolution SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting). Since we ex

历史摘要 · 未重新核验 · GitHub Advisory

Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint

CVE-2026-45796

## Summary Unauthenticated semi-blind Server-Side Request Forgery (SSRF) via the Azure instance identity endpoint (`POS

历史摘要 · 未重新核验 · GitHub Advisory