CVE-2026-109682 is a server-side request forgery (SSRF) vulnerability in Rapid7 Metasploit Framework versions before 6.5.7. It allows HTTP requests made via the send_request_cgi! method to follow redirects to arbitrary hosts without restriction. This can enable a malicious HTTP server to induce the Metasploit operator's system to access internal or otherwise inaccessible HTTP services.
CVE-2026-109681 is a server-side request forgery (SSRF) vulnerability in the FTP client component of the Rapid7 Metasploit Framework. The client trusts the IP address and port specified in the server's PASV response without validating that it matches the control connection target. This allows a malicious FTP server to specify an arbitrary IP and port, causing the client to open a TCP connection to an unintended host.
Bulwark Webmail versions prior to 1.9.2 contain a server-side request forgery (SSRF) vulnerability in the unauthenticated POST /api/fetch-ical endpoint and certain authenticated flows. The flaw arises from a DNS rebinding attack that allows an attacker controlling authoritative DNS to cause the server to fetch internal HTTP or HTTPS resources, potentially exposing up to 10 MB of internal data. This vulnerability is fixed in version 1.9.2.
ApostropheCMS versions from 4.25.0 up to but not including 4.33.0, and AI helper versions from 1.0.0-beta.10 up to but not including 1.0.0-beta.13, contain a server-side request forgery (SSRF) vulnerability. This occurs when an editor uses image-generation features to create base64-generated image records without a stored provider URL, allowing the server to make bounded requests to attacker-controlled hosts. The vulnerability is fixed in versions 4.33.0 and 1.0.0-beta.13.
SolarWinds Observability Self-Hosted contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that allows authenticated attackers to make the application server send requests to destinations controlled by the attacker or internal network resources. This vulnerability has a medium severity rating with a CVSS score of 6.4. No affected versions or patch information are provided.
CVE-2026-111761 is a Server-Side Request Forgery (SSRF) vulnerability in the a2a-java SDK prior to version 1.3.0.Final. The vulnerability arises because the BasePushNotificationSender component sends task data to URLs without validating the destination, allowing unauthenticated attackers to register arbitrary destinations. This can cause the server to send requests to internal or restricted network addresses. The issue is fixed in version 1.3.0.Final.
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the `jwks_uri` contained in that response without parsing it as a URL, comparing it against the approved issuer's origin, or requiring HTTPS — the only check is that the field is non-empty (`pia/oidc.py:42-52`). An approved identity provider — and every registered per-project Jenkins instance under `https://ci.eclipse.org/<project>/oidc` is a separate such party (`pia/models.py`) — can therefore direct PIA to issue a GET request to an arbitrary host and port, including over plaintext `http`, from PIA's own network position. The fetch happens before any signature is verified, as a side effect of an unauthenticated `POST /v1/upload/sbom` request that is ultimately rejected with 401.
CVE-2026-112237 is a Server-Side Request Forgery (SSRF) vulnerability in the TYPO3 extension "Kitodo.Presentation." The extension exposes a public proxy endpoint that fetches URLs on behalf of users. One HTTP request method lacks the authorization check applied to others, allowing unauthenticated attackers to control the URL fetched by the server. Attackers can send requests to arbitrary internal or external hosts and receive status codes and selected response headers, enabling probing of internal hosts and ports. Response bodies are not disclosed. The vulnerability affects versions prior to 7.0.2 and 6.0.1, which have been fixed.
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.
CVE-2026-112991 is a server-side request forgery (SSRF) vulnerability in the html_to_markdown expansion module of MISP misp-modules. The vulnerability arises from an incomplete URL validation function that fails to block several critical internal IP address ranges. An authenticated user able to create or modify attributes triggering this module can cause the MISP server to make requests to internal network addresses, potentially exposing sensitive data from internal services. The vulnerability affects versions from 0 up to and including 3.0.12.
CVE-2026-80344 is a Server-Side Request Forgery (SSRF) vulnerability in the Apache Camel AS2 component. The flaw allows a remote attacker to specify an arbitrary host for asynchronous Message Disposition Notification (MDN) delivery, potentially causing the server to connect to internal or unauthorized hosts. This can expose internal network resources and leak credentials used for MDN delivery. The vulnerability affects Apache Camel versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. Fixed versions are 4.18.5 and 4.22.1, and 4.23.0 is the latest version that addresses the issue. Mitigation includes upgrading to fixed versions or restricting outbound connectivity and credential usage for MDN delivery.
CVE-2026-78163 is a Server-Side Request Forgery (SSRF) vulnerability in the Apache Camel Docling component affecting versions from 4.15.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the DoclingProducer interprets message body prefixes to decide how to process them, allowing untrusted input to trigger remote URL fetches or local file reads without explicit configuration. This implicit mode selection can lead to unauthorized access to remote or local resources. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1. Users unable to upgrade immediately should avoid routing external message bodies into Docling endpoints or use typed bodies or headers to prevent prefix interpretation.
CVE-2026-108764 is a Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin versions 4.0.0 through 5.0.4. The vulnerability primarily impacts the Kylin job service when it is directly exposed to a public network, which is uncommon. In-house deployments of Apache Kylin are generally not affected. The issue is fixed in version 5.0.5.
A Server-Side Request Forgery (SSRF) vulnerability exists in the WP Data Access WordPress plugin before version 5.5.88. The flaw arises because one of the plugin's actions lacks authorization and CSRF protections, allowing any authenticated user, including low-privileged roles like subscribers, to make the server connect to arbitrary hosts and ports and read the response.
CVE-2026-59970 is a Server-Side Request Forgery (SSRF) vulnerability in Tandoor Recipes prior to version 2.6.10. The application improperly passes an administrator-controlled AI provider URL directly to LiteLLM without applying SSRF protections. This allows an authenticated user to configure an AI provider URL targeting internal network addresses and invoke AI actions that connect to these URLs, bypassing safe request checks. The vulnerability enables blind network reachability detection of internal hosts and ports, including cloud metadata endpoints. The issue is fixed in version 2.6.10.
CVE-2026-102923 is a server-side request forgery (SSRF) vulnerability in SparkyFitness, a self-hosted AI-powered health and fitness tracker. Versions prior to 1.6.0 do not validate user-supplied destinations in custom AI service settings, allowing authenticated users to trigger outbound POST requests with controlled bearer tokens. This can lead to probing internal services and disclosure of AI system prompts. The issue is fixed in version 1.6.0.
CVE-2026-110805 is a server-side request forgery (SSRF) vulnerability in the PingOne groups endpoint of Devolutions Server versions 2026.3.8.0 and earlier. It allows an authenticated low-privileged user to exfiltrate the stored PingOne application secret by manipulating the PingOne configuration in a request parameter. The vulnerability has a low CVSS score of 2.6, indicating limited impact and requiring user interaction with high attack complexity.
Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the <svg> parameter of the POST request generated by selecting Download PDF. The content is processed by the export.highcharts.com service, which sends HTTP requests to attacker-controlled external resources and embeds their responses in the generated PDF. The reported behavior allows the export service to be used as an intermediary for these requests.
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. From 1.1.0 until 3.0.4, and in 3.1.0, the public getFormDefinitionByObjectenApiUrl and deprecated getFormDefinitionById GraphQL resolvers are reachable without CommonGroundAuthentication and forward a caller-influenced URL through ObjectenApiService.getObjectByUrl to ObjectsApiClient.getObjectByUrl, which attaches the privileged Objecten-API token. The host-equality check restricts requests to the configured Objecten-API host but does not constrain the scheme, port, or path, allowing an unauthenticated caller to induce a token-bearing request to a chosen endpoint on that host. Standard deployments are not exposed to cross-host SSRF, token capture requires attacker-controlled routing on the configured host, and typed deserialization limits returned data to objects shaped like form definitions. The 3.0 release line is fixed in version 3.0.4. The advisory does not identify a fixed 3.1 release.
Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url to check only URL syntax before passing the value to urllib.request.urlopen, and fetch_ical_conditional periodically refetches the stored URL. The server can therefore issue requests to attacker-selected external or internal hosts, while distinct responses, including an uncaught http.client.RemoteDisconnected condition for non-HTTP services, reveal internal host and port reachability. The supported impact is forced outbound requests and internal service reconnaissance; the advisory does not demonstrate secret retrieval because the relevant ECS credentials path is task-specific and unpredictable. This issue is fixed in version 2.2.60.