Threats Tagged 'cve-2026-71366'
View all threats tagged with 'cve-2026-71366'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-71366'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-71366: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Ansible Automation Platform 2CVE-2026-71366 0 CVE-2026-71366 is a server-side request forgery (SSRF) vulnerability affecting multiple notification backends in Red Hat Ansible Automation Platform 2, including webhook, Mattermost, Rocket.Chat, and Grafana. These backends use notification template URLs as direct HTTP request targets without validating against private, loopback, or reserved IP ranges. This allows an organization notification administrator to cause the AWX control node to send HTTP requests to internal or loopback addresses. The webhook backend also follows HTTP redirects and resends Basic Authentication credentials to redirected hosts, risking credential exfiltration. The Grafana backend sends its API key in the Authorization header to the configured target URL. No official fix is currently available, and mitigation relies on restricting notification template creation and network egress filtering. Join the discussion | CVE Database V5 | 08/24/2026, 15:42:44 UTC Added: 08/24/2026, 15:52:54 UTC |
Showing 1 to 1 of 1 result