Threats Tagged 'cve-2026-67530'
View all threats tagged with 'cve-2026-67530'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-67530'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-67530: CWE-918: Server-Side Request Forgery (SSRF) in ArnasDon wacrmCVE-2026-67530 0 WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validation in src/lib/automations/validate.ts allowed an authenticated user with automation privileges to submit an arbitrary webhook URL that the server fetched without the existing isDeliverableUrl SSRF guard in src/lib/webhooks/ssrf.ts, allowing requests to private, loopback, link-local, or cloud metadata addresses such as the cloud metadata endpoint at 169.254.169.254. This vulnerability is fixed with commit 23838a9959550e975d732ae08a44a3a2f0cc084b. Join the discussion | CVE Database V5 | 07/30/2026, 19:38:34 UTC Added: 07/30/2026, 20:07:41 UTC |
Showing 1 to 1 of 1 result