CVE-2026-113688 is a server-side request forgery (SSRF) vulnerability in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01. It allows authenticated users to make server-side requests to internal services and observe response information. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.3.
CVE-2026-71569 is a Server-Side Request Forgery (SSRF) vulnerability in the Apache Camel A2A component affecting versions from 4.21.0 up to but not including 4.22.2. The issue arises from inconsistent host classification in the WebhookUrlValidator, allowing an attacker-controlled webhook URL to bypass local address restrictions when written as an IPv6 literal in the fc00::/7 unique local address range. This can cause the Camel process to make blind outbound HTTPS requests to internal addresses with attacker-supplied authorization headers. The vulnerability has medium severity due to the need for specific network conditions and TLS handshake success. The issue is fixed in Apache Camel 4.22.2 and later.
CVE-2026-111418 is a server-side request forgery (SSRF) vulnerability in Foxit Software Inc.'s official website HTML-to-PDF conversion service. The vulnerability arises because the service supports ZIP-formatted input, which can be exploited to bypass restrictions on requests to internal IP addresses. This may allow an attacker to discover internal network resources. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-61572 is a server-side request forgery (SSRF) vulnerability in WWBN AVideo-Encoder versions prior to 8.1.0. It allows unauthenticated remote attackers to make arbitrary HTTP, HTTPS, and FTP requests to internal network services, including cloud instance metadata endpoints. The vulnerability arises from insufficient validation of URLs and disabled TLS verification, combined with unsafe cookie-based reauthentication and response reflection. Version 8.1.0 includes an initial fix that removes raw response reflection and adds destination checks, but some private network exemptions and TLS verification issues remain unresolved.
CVE-2026-57448 is a server-side request forgery (SSRF) vulnerability in blombooru versions prior to 1.40.0. The administrator-only endpoint /api/booru-import/proxy-image accepts a URL parameter and fetches it without proper validation, allowing requests to internal, loopback, and link-local addresses. This can enable an authenticated administrator to enumerate internal services and access cloud metadata, potentially exposing sensitive credentials. The vulnerability is fixed in version 1.40.0.
CVE-2026-118660 is a server-side request forgery (SSRF) vulnerability in the Happy DOM JavaScript library prior to version 21.0.0. The library loads iframe src and stylesheet href URLs by default when parsing untrusted HTML on the server, which can be exploited by attackers controlling the HTML to make arbitrary internal or cloud endpoint requests. This may lead to exposure of confidential responses or credentials. The vulnerability is fixed in Happy DOM version 21.0.0.
CVE-2026-118659 is a Server-Side Request Forgery (SSRF) vulnerability in the Happy DOM server-renderer package prior to version 21.0.2. The vulnerability allows unauthenticated HTTP/2 requests with attacker-controlled paths to be resolved against the server's target origin without verifying if the resolved origin remains trusted. This can lead to the server fetching arbitrary HTTP or HTTPS endpoints, including internal services, and relaying the response back to the attacker. The issue is fixed in Happy DOM version 21.0.2.
Endatix versions prior to 0.7.0 contain a server-side request forgery (SSRF) vulnerability in the handling of anonymous form submissions. An attacker can submit JSON data containing a file object with an HTTP or HTTPS URL. When a staff member with appropriate permissions accesses the submission files, the server performs an HTTP GET request to the attacker-controlled URL without validating the destination. This allows the server to make unauthorized requests to internal network resources. The vulnerability is fixed in version 0.7.0.
CVE-2025-14260 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in WSO2 API Manager caused by improper access control implementation. This flaw allows attackers to make the server access internal or external network or filesystem resources, potentially leading to unauthorized access to sensitive data and systems reachable by the product. Multiple versions of WSO2 API Manager prior to specific fixed releases are affected.
CVE-2026-88967 is a server-side request forgery (SSRF) vulnerability in Grafana Enterprise affecting users with query access to Azure Monitor data sources. Exploitation allows an attacker to cause the server to send requests to attacker-controlled endpoints, potentially disclosing the Azure access token associated with the data source. This vulnerability affects multiple versions of Grafana Enterprise from 10.0.0 through 13.2.4. The issue has a high severity rating with a CVSS score of 7.7. A patch is available, and Grafana manages remediation for this cloud-hosted service.
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
CVE-2026-115225 is a server-side request forgery (SSRF) vulnerability in the Customer Engagement System WordPress plugin versions before 2.0.2. The flaw allows unauthenticated users to make the server connect to arbitrary internal hosts and ports by exploiting the MailChimp interest-group lookup feature without proper API key validation or access restrictions. This can enable attackers to infer the reachability of internal network resources based on response timing.
CVE-2026-116686 is a server-side request forgery (SSRF) vulnerability in the Model Context Protocol Python SDK versions from 1.10.0 up to but not including 1.30.0, and from 2.0.0 up to but not including 2.2.0. The vulnerability arises because certain client calls validate server-declared outputSchema documents using jsonschema's default resolver, which can cause unresolved $ref values to fetch HTTP, HTTPS, or file URLs from the client's network or filesystem. This allows a malicious server to trigger blind requests or local file reads and stall sessions due to synchronous resolution without timeout. The issue is fixed in versions 1.30.0 and 2.2.0.
CVE-2026-118172 is a server-side request forgery (SSRF) vulnerability in Strapi Open Source and Enterprise Headless CMS version 5.51.0. The vulnerability arises because the webhook dispatcher follows HTTP redirects automatically without performing IP resolution after the redirect or checking if the redirected IP is within private or link-local address ranges. Additionally, non-2xx HTTP responses from target endpoints are reflected back to the caller. This flaw allows an attacker to potentially induce the server to make unauthorized requests to internal or protected network resources.
HomeBox versions prior to 0.27.0 contain a server-side request forgery (SSRF) vulnerability. The product validates notifier URLs before use, but the underlying HTTP client does not revalidate redirects, allowing an authenticated user to configure a notifier that redirects to restricted internal addresses. This bypasses the SSRF protections and can be triggered immediately or during scheduled notifier deliveries. The issue is fixed in version 0.27.0.
CVE-2026-116678 is a server-side request forgery (SSRF) vulnerability in Vaultwarden prior to version 1.37.0. The flaw arises because the icon downloader improperly handles favicon URLs parsed from attacker-controlled HTML, allowing bypass of host validation and DNS normalization protections. This enables a remote unauthenticated attacker to cause the Vaultwarden server to make requests to internal or loopback addresses. The vulnerability affects instances with internal icon downloading enabled and can leak internal responses or reveal internal network reachability. The issue is fixed in version 1.37.0.
CVE-2026-87897 is a server-side request forgery (SSRF) vulnerability in the Nextcloud Whiteboard application. It allows a low privileged attacker to access internal Chrome Devtools Protocol APIs and leak JWT authentication tokens of other users. Exploiting this flaw can grant the attacker read and write access to the victim's Whiteboard session. The vulnerability affects versions prior to 1.0.0 and has been fixed in version 1.0.0.
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure.
NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and specific LTS releases contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows an unauthenticated remote attacker to potentially perform SSRF attacks. The vulnerability is rated medium severity with a CVSS score of 5.8. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0 depending on the release line.