CVE-2026-56677 is a high-severity vulnerability in decolua 9router versions 0.5.4 and earlier. It involves a missing authentication check on the POST /api/auth/oidc/test endpoint, which allows unauthenticated attackers to scan internal services and retrieve OpenID Connect discovery information when dashboard login is disabled.
A Server-Side Request Forgery (SSRF) vulnerability exists in vllm-project's vllm prior to version 0.26.0. The MiMoV2OmniMultiModalProcessor improperly handles attacker-controlled image and audio inputs by bypassing domain and local path restrictions, allowing unauthorized server-side requests and file reads accessible to the vLLM process. This vulnerability is fixed in version 0.26.0.
Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints on the `RemoteFacilityUser*` viewsets; remediation review found two further reflection points on the same pattern. The GET endpoint was unauthenticated. Version 0.19.4 fixes the vulnerability.
CVE-2026-75054 is a Server-Side Request Forgery (SSRF) vulnerability in JetBrains IntelliJ IDEA versions before 2026.2.1. The flaw exists in the OpenAPI preview proxy when used in untrusted projects, potentially allowing an attacker to induce the application to make unauthorized requests. This vulnerability has been fixed in version 2026.2.1.
CVE-2026-75053 is a Server-Side Request Forgery (SSRF) vulnerability in JetBrains IntelliJ IDEA versions before 2026.2.1. The flaw exists in the DevKit debug listener endpoint, allowing an attacker to induce the application to make unintended requests. This vulnerability has a medium severity with a CVSS score of 5.4. JetBrains has fixed the issue in version 2026.2.1.
A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-75006 is a Server-Side Request Forgery (SSRF) vulnerability in Roundcube Webmail versions before 1.6.18 and 1.7.3. It arises from insufficient sanitization of CSS in HTML email messages, allowing malicious stylesheet links to potentially access local network hosts. This vulnerability is due to incomplete fixes of previous related CVEs. The issue has a medium severity rating with a CVSS score of 5.8.
CVE-2026-13700 is a Server-Side Request Forgery (SSRF) vulnerability in the WooMS WordPress plugin versions up to and including 9.14. The plugin fails to validate user-supplied URLs before using them in server-side requests and attaches stored third-party integration credentials to these requests. This flaw allows unauthenticated attackers to perform SSRF attacks and potentially disclose sensitive integration credentials when the data-sync feature is enabled.
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhook_url' setting. The widget's render() method persists the attacker-controlled URL into the wpr_webhook_url_{widget_id} option on every render (including a Contributor previewing their own draft), and the wpr_form_builder_webhook AJAX handler — registered for both authenticated and unauthenticated callers — reads that option and dispatches the outbound request via the non-safe wp_remote_post(), with no host allowlist, no scheme restriction, and no private/loopback IP filter (the plugin's existing wpr_is_blocked_remote_host / wpr_is_private_or_local_ip helpers are not called on this path). This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 0.9.8-hotfix1 and 0.9.8 is sufficient to resolve this issue. The patch is named a599007325efe780a21b3537ecce3ca25635c926. It is suggested to upgrade the affected component.
ContextForge is an AI gateway, registry, and proxy that provides centralized discovery, guardrails, and management for MCP, A2A, and REST or gRPC APIs. Prior to 1.0.3, the /admin/gateways/test call site in mcpgateway/admin.py calls validate_gateway_test_url() in mcpgateway/common/validators.py to resolve and reject private, loopback, link-local, and cloud-metadata addresses, but ResilientHttpClient later resolves the original hostname again without binding the validated address. When MCPGATEWAY_ADMIN_API_ENABLED is enabled, an attacker with a database-backed role containing explicit gateways.read permission can use DNS rebinding to return a public address during validation and a private or metadata address during connection, bypassing ssrf_blocked_networks and ssrf_dns_fail_closed because those controls apply only to the validation-time result. The endpoint's allow_admin_bypass=False setting means a bootstrap-only virtual platform-admin identity without a database role is not sufficient. Successful exploitation can reach internal services and cloud metadata, expose cloud credentials, access internal APIs, or probe internal network ports. This issue is fixed in version 1.0.3.
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckan_get_mqa_quality and ckan_get_mqa_quality_details tools in src/tools/quality.ts use isValidMqaServer to validate the server_url parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host and URL-userinfo values to target an attacker-controlled host and return a spoofed response. This issue is fixed in version 0.4.112.
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user-supplied URL directly to requests.get() without validation. This allows an attacker to perform Server-Side Request Forgery, targeting internal services or cloud metadata endpoints. Versions 3.12.2 and 4.0.3 fix the issue.
CVE-2026-59765 is a Server-Side Request Forgery (SSRF) vulnerability in Gitea Open Source Git Server affecting versions up to 1.26.4. The flaw allows an attacker to bypass host matching restrictions during migration asset downloads, enabling unauthorized reading of internal files and cloud metadata. The vulnerability has a high severity score of 7.5 and does not require user interaction or privileges to exploit.
CVE-2026-58442 is a medium severity vulnerability in Gitea Open Source Git Server versions up to 1.26.4. It involves a server-side request forgery (SSRF) through repository migration, where a multi-answer DNS allow-list can be bypassed, potentially exposing sensitive information.
CVE-2026-58441 is a Server-Side Request Forgery (SSRF) vulnerability in Gitea Open Source Git Server affecting versions from 0 up to 1.26.4. The flaw exists in the restore-repo functionality where the pull_request.yml file's Head.CloneURL is not properly sanitized. This vulnerability allows an attacker with limited privileges to induce the server to make unauthorized requests, potentially leading to information disclosure. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a medium severity level.
CVE-2026-58314 is a high-severity vulnerability in Gitea Open Source Git Server versions up to 1.26.4. It involves two Server-Side Request Forgery (SSRF) issues identified in version 1.26.2. The vulnerability allows an attacker with low privileges and no user interaction to cause a server to make unintended requests, potentially leading to high confidentiality impact without affecting integrity or availability.
CVE-2026-57894 is a high-severity vulnerability in Gitea Open Source Git Server versions up to 1.26.4. It involves repository migration functionality that improperly follows Git HTTP redirects after URL allow/block validation. This flaw enables an attacker with limited privileges to exfiltrate internal Git repositories by bypassing intended URL restrictions.
CVE-2026-23603 is a low-severity vulnerability in Gitea Open Source Git Server that involves a blind Server-Side Request Forgery (SSRF) in the OAuth2 avatar synchronization feature. The flaw arises from unvalidated OpenID Connect (OIDC) picture claims, allowing an attacker to cause the server to make unintended requests. The vulnerability affects Gitea versions from 0 up to and including 1.26.4. No public exploits or known active exploitation have been reported, and no patch information is currently available.