Psono Server CE and EE versions 0.1.0 through 7.2.3 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker can cause the server to connect to arbitrary HTTPS hosts on port 443 without an allowlist or explicit timeout, potentially revealing internal DNS and service reachability information. TLS certificate validation is enforced, limiting protocol and port access. The flaw can also cause server worker threads to be occupied by unresponsive targets until OS timeouts occur. This vulnerability is fixed in version 7.2.4.
Mattermost versions 11.7.0 through 11.7.10 contain a server-side request forgery (SSRF) vulnerability in the OpenID discovery endpoint. This flaw allows a System Administrator to verify the reachability of internal network addresses and ports from the server by triggering an unauthenticated login request that initiates the discovery fetch. The vulnerability has a low severity score and does not impact confidentiality, integrity, or availability beyond information disclosure about internal network reachability.
Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed IPv6 literal or an IP literal with a trailing dot. A host such as %5B%3A%3Affff%3A127%2E0%2E0%2E1%5D (decoding to [::ffff:127.0.0.1]) or 127.0.0.1. is not an IP address to a caller's allowlist built on uri_string:parse/1 and inet:parse_address/1, while hackney connects to the address it denotes. The same applies to a Location target when redirects are followed.
The IP-literal gate that hackney_url:normalize/2 applies to a percent-decoded host, added to close the percent-encoded IP bypass of CVE-2026-47076, passes the decoded value to inet_parse:address/1 as is. The connect path in hackney_happy:parse_address/1 drops a surrounding bracket pair, and the resolver ignores a trailing dot, so both forms pass the gate and still reach the literal address. Domain names with a trailing dot and unencoded IPv6 literals are not affected.
This issue affects hackney: from 4.0.1 before 4.9.0.
Harbor versions prior to 2.15.3, 2.14.5, and 2.13.6 contain a Server-Side Request Forgery (SSRF) vulnerability in the webhook delivery component. An authenticated attacker with ProjectAdmin permissions can exploit this to make Harbor send HTTP POST requests to internal or link-local IP addresses. Error responses from these requests are logged and accessible to project members, potentially exposing sensitive internal resources such as cloud metadata.
CVE-2026-89049 is a server-side request forgery (SSRF) vulnerability in the AWS Systems Manager Agent's Session Manager port forwarding feature. An authenticated user with port-forwarding permission can bypass the remote destination denylist due to improper validation of equivalent address representations. This allows the user to reach link-local endpoints and potentially obtain the managed instance's temporary IAM role credentials, enabling actions with those permissions from outside the instance. The vulnerability affects all versions prior to 3.3.4851.0. AWS has released version 3.3.4851.0 to fix this issue. Until upgrading, it is recommended to restrict the use of the AWS-StartPortForwardingSessionToRemoteHost document by scoping IAM permissions.
MLflow versions from 3.12.0rc0 up to but not including 3.17.0 contain a reflection injection vulnerability in certain endpoints that accept serialized third-party scorer data. This flaw allows attackers to exploit deserialization logic when optional trulens packages are installed, enabling outbound requests to attacker-controlled or internal hosts with crafted headers and body. The vulnerability is fixed in version 3.17.0.
CVE-2026-115813 is a server-side request forgery (SSRF) vulnerability in Amazon Web Services Multi Model Server versions 1.1.11 and earlier. This flaw allows remote attackers to send crafted requests to internal network destinations via the model download path. The product is end of life with no fixed version available, and AWS recommends discontinuing its use and migrating to supported solutions.
CVE-2026-46651 is a critical vulnerability in intranda goobi-viewer-core versions 24.03 up to but not including 26.05. The DownloadTaskEndpoint WebSocket endpoint (/tasks/download/monitor.socket) accepts download requests from unauthenticated users, allowing unauthorized access to critical functionality. This flaw has been fixed in version 26.05.
CVE-2026-55190 is a server-side request forgery (SSRF) vulnerability in Event Schedule versions 1.0.0 and earlier. The vulnerability arises because the SSRF protection function App\Utils\UrlUtils::isUrlSafe() can be bypassed, allowing attackers to make the application fetch internal or localhost URLs. This occurs when ImportCuratorEvents fetches user-supplied URLs via Http::get() and file_get_contents(), potentially exposing internal services. No patches were available at the time of disclosure.
PraisonAI versions from 4.5.126 up to but not including 4.6.59 contain a time-of-check to time-of-use (TOCTOU) race condition in the Async Jobs API webhook URL validation. The initial validation blocks loopback and private IP targets, but this check is not repeated at the time the webhook is sent. An attacker can exploit this by resolving the hostname to a public IP during validation and then to a loopback or private IP during webhook delivery, bypassing SSRF protections. This vulnerability is fixed in version 4.6.59.
A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensitive internal Apache Solr data via an attacker-controlled URL supplied to a publicly accessible form.
CVE-2026-108456 is a server-side request forgery (SSRF) vulnerability in Microsoft Azure AI Foundry. It allows an authorized attacker to elevate privileges over a network. The vulnerability has a high severity score of 7.7 and has been officially fixed by Microsoft. Azure AI Foundry is a cloud service, and Microsoft manages the remediation for this vulnerability.
Authlib versions prior to 1.9.0 contain a server-side request forgery (SSRF) vulnerability in the RFC 9101 JWTAuthenticationRequest component. The vulnerability arises because the unauthenticated, client-controlled request_uri parameter is passed to a hook before destination validation, allowing potential unauthorized internal or link-local URL requests if the integrator's hook performs unrestricted outbound fetches. This issue is fixed in version 1.9.0.
CVE-2026-108360 is an incorrect authorization vulnerability in PHPOffice PhpSpreadsheet affecting versions prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0. The issue arises when the Worksheet\Drawing::setPath method validates only the initial external-image URL whitelist, allowing an attacker to exploit HTTP redirects to cause the server to make blind GET requests to internal or cloud metadata endpoints. The downloaded content is validated and removed, so no data is leaked to the attacker, but internal network reachability can be probed. The vulnerability is fixed in the specified versions.
A Server-Side Request Forgery (SSRF) vulnerability exists in py-pdf's fpdf2 library prior to version 2.8.8. The shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through various image input methods, potentially causing outbound requests to attacker-chosen internal or external services and local file access if the content is a valid image or SVG. This vulnerability is fixed in version 2.8.8.
CVE-2026-114730 is a server-side request forgery (SSRF) vulnerability in Roundcube Webmail versions 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5. The vulnerability arises because the network blocklist used by the is_local_url() function did not include certain NAT64 prefixes and the unspecified address, allowing crafted URLs to bypass the filter and access internal network addresses. This flaw was fixed in versions 1.6.20 and 1.7.5.
CVE-2026-87953 is a Server-Side Request Forgery (SSRF) vulnerability in the Drupal SAML SSO - Service Provider module affecting versions from 0.0.0 up to but not including 3.2.0. The vulnerability allows an attacker with high privileges to induce the server to make unintended requests. The issue has a low CVSS score of 3.3 and was fixed in version 3.2.0.
CVE-2026-92204 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's OneDrive Connector, specifically in the _get_shared_drive_object method. It allows authenticated remote attackers to initiate arbitrary server-side requests, potentially disclosing information accessible to the service account. The vulnerability arises from improper validation of URIs before resource access. It affects Airbyte version 1.8 and has a high severity rating with a CVSS score of 7.7.
CVE-2026-92203 is a Server-Side Request Forgery (SSRF) vulnerability in Airbyte's SharePoint Connector specifically in the _get_shared_drive_object method. It allows authenticated remote attackers to make arbitrary server-side requests due to improper URI validation. Exploitation can lead to information disclosure within the context of the service account. The vulnerability affects Airbyte version 1.8 and has a high severity rating with a CVSS score of 7.7.
CVE-2026-92210 is a Server-Side Request Forgery (SSRF) vulnerability in the NoMachine nxhtd web service, which listens on UDP port 4443 by default. This flaw allows remote attackers to initiate arbitrary server-side requests without authentication due to improper validation of URIs. The vulnerability enables attackers to make requests in the context of the service account, potentially leading to information disclosure. The CVSS v3.0 score is 7.2, indicating high severity.