Adobe ColdFusion 2025 contains a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-75748) that allows an attacker with high privileges to escalate access to internal resources without user interaction. The vulnerability affects versions up to 2025.0.13 and 2023.0.25. The issue changes the security scope and has a high severity rating with a CVSS score of 7.6.
CVE-2026-88206 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects versions 16.0.0 up to but not including 16.0.20326.20190. A patch is available in version 16.0.20326.20190.
CVE-2026-70202 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A high-severity issue with a CVSS score of 7.5, it has been officially fixed in version 16.0.20326.20190. No known exploits are reported in the wild at this time.
CVE-2026-96204 is a server-side request forgery (SSRF) vulnerability in Microsoft Arc Enabled Servers - Azure Connected Machine Agent. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects versions from 1.0.0 up to but not including 1.68. A fix is available in version 1.68. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
CVE-2026-70259 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to disclose information over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A patch is available and has been officially released by Microsoft.
CVE-2026-70251 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to elevate privileges over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A patch is available and has been officially released by Microsoft.
CVE-2026-105713 is a server-side request forgery (SSRF) vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to perform spoofing over an adjacent network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20190. A fix is available in version 16.0.20326.20190.
Misskey versions from 12.0.0 through 13.14.2 and from 2023.9.0-beta.1 up to but not including 2026.7.0 have a vulnerability in the unauthenticated fetch-rss API. This API lacks rate limiting and response size restrictions and performs synchronous XML parsing. An attacker can exploit this to cause unbounded outbound HTTP requests and synchronous parsing, leading to resource exhaustion on the instance, amplification of requests toward third-party servers, or probing of network-reachable services even if federation is disabled. The issue is fixed in version 2026.7.0.
CVE-2026-107460 is a critical Server-Side Request Forgery (SSRF) vulnerability in Apache Fesod (Incubating) version 2.0.2-incubating. The flaw involves a DNS rebinding bypass in the UrlImageConverter component, allowing attackers to bypass hostname validation and access internal restricted addresses. Apache has mitigated this issue in version 2.1.0-incubating by disabling remote URL image fetching by default and requiring an explicit allowlist for trusted hosts.
NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key map URL. A successful exploit of this vulnerability might lead to information disclosure.
NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a crafted original URL. A successful exploit of this vulnerability may lead to information disclosure.
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAuth2 token requests to an attacker-controlled server, causing client credentials to be exfiltrated.
This vulnerability was originally fixed in 0.45.2. It was reintroduced in 0.53.0 when the HTTP client was refactored into a shared core module, and the tenant subdomain validation was not carried over to the new location. The validation was restored in 0.55.1.
CVE-2026-57143 is an improper input validation vulnerability in MervinPraison's praisonaiagents before version 1.6.62. The vulnerability involves the searxng_search and search_web SearxNG providers passing an LLM-controlled URL parameter directly to requests.get without validating its scheme, host, port, or resolved address. This allows prompt-injected content to access internal JSON services, probe internal ports, and attempt cloud metadata requests, with the results incorporated into the agent context. The issue is fixed in version 1.6.62.
Progress Software Corporation MarkLogic Server versions 11.0.0 through before 11.3.7 and 12.0.0 through before 12.1.0 contain a Server-Side Request Forgery (SSRF) vulnerability in deprecated OpsDirector functionality. This flaw allows an unauthenticated remote attacker to make unauthorized requests to internal services or forge trusted requests, potentially leading to unauthorized access to protected information. The vulnerability has a high severity with a CVSS score of 7.5.
Progress Software Corporation MarkLogic Server versions 11.0.0 up to but not including 11.3.7 and 12.0.0 up to but not including 12.1.0 on Linux contain a server-side request forgery (SSRF) vulnerability. This flaw allows an authenticated attacker to make unauthorized requests to internal cloud services, potentially leading to unauthorized access to cloud credentials. The vulnerability is identified as CWE-918 and has a high severity score of 8.5. No known exploits are reported in the wild, and the product is not a cloud service. Patch status is not explicitly confirmed in the provided data.
Progress Software Corporation's MarkLogic Server versions 11.x before 11.3.7 and 12.x before 12.1.0 on Azure have a server-side request forgery (SSRF) vulnerability. This flaw allows an authenticated attacker to make unauthorized requests to internal cloud services, potentially leading to unauthorized access to cloud credentials or tokens. The vulnerability has a high severity with a CVSS score of 8.5. A patch is available to remediate this issue. The affected service is cloud-hosted, and the vendor manages remediation for this environment.
In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker-controlled metadata and content. Exploitation requires control over copy queue work and a race condition.
In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.
CVE-2026-27350 is a Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius affecting versions from 1.4 through 1.4-beta. This vulnerability allows an attacker to induce the server to make unintended requests. The CVSS score is 7.2, indicating a high severity with potential impact on confidentiality and integrity but no impact on availability. No official patch or remediation details are provided in the available data.
CVE-2026-62030 is a high-severity Server-Side Request Forgery (SSRF) vulnerability affecting bPlugins StreamCast versions up to and including 2.4.5. This vulnerability allows unauthenticated attackers to induce the server to make arbitrary requests, potentially leading to limited confidentiality and integrity impacts. No official patch or remediation details are provided in the available data.