Threats Tagged 'cve-2026-55248'
View all threats tagged with 'cve-2026-55248'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-55248'
Click on any threat for detailed analysis and mitigation recommendations
0 A critical vulnerability (CWE-400) in plone.app.portlets prior to versions 5.0.8, 6.0.4, and 7.0.2 allows a member with permission to add an RSS portlet to cause uncontrolled resource consumption by setting an RSS feed URL that returns a very large response. This leads to excessive memory use and denial of service. The vulnerability also permits server-side request forgery (SSRF) by accepting internal hosts, IPs, single-word domains, and explicit ports, enabling probing of internal network services. Additionally, malicious feed items can inject JavaScript URLs that execute scripts when rendered by victims. The issue affects multiple internal validation and caching functions and is fixed in the specified versions. Join the discussion | CVE Database V5 | 08/28/2026, 18:40:50 UTC Added: 08/28/2026, 19:39:56 UTC |
Showing 1 to 1 of 1 result