Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: cwe-918 Clear
ID Title
CVE-2026-82476 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82476)
SSRF in ssrf (CVE-2026-82476). Risk of unauthorized operations or information disclosure.
CVE-2026-82477 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82477)
SSRF in ssrf (CVE-2026-82477). Risk of unauthorized operations or information disclosure.
CVE-2026-18545 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-18545)
SSRF in ssrf (CVE-2026-18545). Risk of unauthorized operations or information disclosure.
CVE-2026-82289 SSRF (Server-Side Request Forgery) in CVE-2026-82289 (CVE-2026-82289)
SSRF in CVE-2026-82289 (CVE-2026-82289). Confidential information can be exposed externally.
CVE-2026-82285 SSRF (Server-Side Request Forgery) in CVE-2026-82285 (CVE-2026-82285)
SSRF in CVE-2026-82285 (CVE-2026-82285). Confidential information can be exposed externally. Exploitable via `POST /api/v1/workflow/report/callback`.
CVE-2026-82268 SSRF (Server-Side Request Forgery) in CVE-2026-82268 (CVE-2026-82268)
SSRF in CVE-2026-82268 (CVE-2026-82268). Confidential information can be exposed externally.
CVE-2026-82270 SSRF (Server-Side Request Forgery) in CVE-2026-82270 (CVE-2026-82270)
SSRF in CVE-2026-82270 (CVE-2026-82270). Confidential information can be exposed externally. Exploitable via `Authorization header`.
CVE-2026-82262 SSRF (Server-Side Request Forgery) in CVE-2026-82262 (CVE-2026-82262)
SSRF in CVE-2026-82262 (CVE-2026-82262). Confidential information can be exposed externally. Exploitable via `POST /api/hooks/`.
CVE-2026-82263 SSRF (Server-Side Request Forgery) in CVE-2026-82263 (CVE-2026-82263)
SSRF in CVE-2026-82263 (CVE-2026-82263). Confidential information can be exposed externally.
CVE-2026-54745 Vulnerability in CVE-2026-54745 (CVE-2026-54745)
vulnerability in CVE-2026-54745 (CVE-2026-54745). Successful exploitation can lead to full system takeover. Exploitable via `Referer header`.
CVE-2026-55245 SSRF (Server-Side Request Forgery) in github.com/maximhq/bifrost/core (CVE-2026-55245)
SSRF in github.com/maximhq/bifrost/core (CVE-2026-55245). Risk of unauthorized operations or information disclosure. Exploitable via ``isPublicIP``. Mitigation: upgrade to `1.5.17` or later.
CVE-2026-5096 SSRF (Server-Side Request Forgery) in wordpress (CVE-2026-5096)
SSRF in wordpress (CVE-2026-5096). Risk of unauthorized operations or information disclosure.
CVE-2026-82243 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82243)
SSRF in ssrf (CVE-2026-82243). Confidential information can be exposed externally.
CVE-2026-82246 SSRF (Server-Side Request Forgery) in CVE-2026-82246 (CVE-2026-82246)
SSRF in CVE-2026-82246 (CVE-2026-82246). Confidential information can be exposed externally.
CVE-2026-82241 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82241)
SSRF in ssrf (CVE-2026-82241). Confidential information can be exposed externally. Exploitable via `POST /api/queries/preview`.
CVE-2026-82234 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82234)
SSRF in ssrf (CVE-2026-82234). Confidential information can be exposed externally.
CVE-2026-9491 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-9491)
SSRF in ssrf (CVE-2026-9491). Risk of unauthorized operations or information disclosure.
CVE-2026-82081 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-82081)
SSRF in ssrf (CVE-2026-82081). Risk of unauthorized operations or information disclosure.
CVE-2026-78495 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-78495)
SSRF in ssrf (CVE-2026-78495). Risk of unauthorized operations or information disclosure.
CVE-2026-78500 Vulnerability in ssrf (CVE-2026-78500)
vulnerability in ssrf (CVE-2026-78500). Risk of unauthorized operations or information disclosure.
CVE-2026-78498 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-78498)
SSRF in ssrf (CVE-2026-78498). Risk of unauthorized operations or information disclosure.
CVE-2026-78499 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-78499)
SSRF in ssrf (CVE-2026-78499). Risk of unauthorized operations or information disclosure.
CVE-2026-81848 SSRF (Server-Side Request Forgery) in CVE-2026-81848 (CVE-2026-81848)
SSRF in CVE-2026-81848 (CVE-2026-81848). Risk of unauthorized operations or information disclosure.
CVE-2026-59291 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-59291)
SSRF in ssrf (CVE-2026-59291). Risk of unauthorized operations or information disclosure.
CVE-2026-55758 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-55758)
SSRF in ssrf (CVE-2026-55758). Risk of unauthorized operations or information disclosure.
CVE-2026-81678 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-81678)
SSRF in ssrf (CVE-2026-81678). Confidential information can be exposed externally.
CVE-2026-81093 SSRF (Server-Side Request Forgery) in CVE-2026-81093 (CVE-2026-81093)
SSRF in CVE-2026-81093 (CVE-2026-81093). Confidential information can be exposed externally.
CVE-2026-81091 SSRF (Server-Side Request Forgery) in CVE-2026-81091 (CVE-2026-81091)
SSRF in CVE-2026-81091 (CVE-2026-81091). Confidential information can be exposed externally.
CVE-2026-75871 SSRF (Server-Side Request Forgery) in CVE-2026-75871 (CVE-2026-75871)
SSRF in CVE-2026-75871 (CVE-2026-75871). Confidential information can be exposed externally. Exploitable via `Host header`.
CVE-2026-19889 SSRF (Server-Side Request Forgery) in CVE-2026-19889 (CVE-2026-19889)
SSRF in CVE-2026-19889 (CVE-2026-19889). Confidential information can be exposed externally.
CVE-2026-59278 SSRF (Server-Side Request Forgery) in csharp (CVE-2026-59278)
SSRF in csharp (CVE-2026-59278). Risk of unauthorized operations or information disclosure.
CVE-2026-47879 SSRF (Server-Side Request Forgery) in CVE-2026-47879 (CVE-2026-47879)
SSRF in CVE-2026-47879 (CVE-2026-47879). Confidential information can be exposed externally.
CVE-2026-81421 A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected...
A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected...
CVE-2026-47861 SSRF (Server-Side Request Forgery) in CVE-2026-47861 (CVE-2026-47861)
SSRF in CVE-2026-47861 (CVE-2026-47861). Risk of unauthorized operations or information disclosure.
CVE-2026-75340 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75340)
SSRF in ssrf (CVE-2026-75340). Confidential information can be exposed externally.
CVE-2026-75332 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-75332)
SSRF in ssrf (CVE-2026-75332). Confidential information can be exposed externally.
CVE-2025-62341 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-62341)
SSRF in ssrf (CVE-2025-62341). Risk of unauthorized operations or information disclosure.
CVE-2026-77573 Vulnerability in CVE-2026-77573 (CVE-2026-77573)
vulnerability in CVE-2026-77573 (CVE-2026-77573). Risk of unauthorized operations or information disclosure.
CVE-2026-71172 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-71172)
SSRF in ssrf (CVE-2026-71172). Risk of unauthorized operations or information disclosure.
CVE-2026-79788 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-79788)
SSRF in ssrf (CVE-2026-79788). Confidential information can be exposed externally.
CVE-2026-45019 SSRF (Server-Side Request Forgery) in chainlit (CVE-2026-45019)
SSRF in chainlit (CVE-2026-45019). Risk of unauthorized operations or information disclosure. Exploitable via `POST /mcp`. Mitigation: upgrade to `2.12.0` or later.
CVE-2026-76193 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-76193)
SSRF in ssrf (CVE-2026-76193). Successful exploitation can lead to full system takeover.
CVE-2026-70548 SSRF (Server-Side Request Forgery) in CVE-2026-70548 (CVE-2026-70548)
SSRF in CVE-2026-70548 (CVE-2026-70548). Risk of unauthorized operations or information disclosure.
CVE-2026-70551 SSRF (Server-Side Request Forgery) in CVE-2026-70551 (CVE-2026-70551)
SSRF in CVE-2026-70551 (CVE-2026-70551). Confidential information can be exposed externally.
CVE-2026-79717 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-79717)
SSRF in ssrf (CVE-2026-79717). Risk of unauthorized operations or information disclosure.
CVE-2026-55535 Vulnerability in PraisonAI (CVE-2026-55535)
vulnerability in PraisonAI (CVE-2026-55535). Confidential information can be exposed externally. Exploitable via ``webhook_url``. Mitigation: upgrade to `4.6.58` or later.
CVE-2026-55537 Vulnerability in PraisonAI (CVE-2026-55537)
vulnerability in PraisonAI (CVE-2026-55537). Confidential information can be exposed externally. Exploitable via `POST /callback`. Mitigation: upgrade to `4.5.126` or later.
CVE-2026-55526 Vulnerability in praisonaiagents (CVE-2026-55526)
vulnerability in praisonaiagents (CVE-2026-55526). Confidential information can be exposed externally. Exploitable via ``scrape_page``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-55525 SSRF (Server-Side Request Forgery) in praisonaiagents (CVE-2026-55525)
SSRF in praisonaiagents (CVE-2026-55525). Confidential information can be exposed externally. Exploitable via ``web_crawl``. Mitigation: upgrade to `1.6.58` or later.
CVE-2026-79671 SSRF (Server-Side Request Forgery) in CVE-2026-79671 (CVE-2026-79671)
SSRF in CVE-2026-79671 (CVE-2026-79671). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.4.3` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →