Threats Tagged 'ghsa-8vqh-rjh4-52qh'
View all threats tagged with 'ghsa-8vqh-rjh4-52qh'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-8vqh-rjh4-52qh'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-71366 is a server-side request forgery (SSRF) vulnerability in multiple notification backends of Red Hat Ansible Automation Platform 2.5 for RHEL 8. The affected backends include webhook, Mattermost, Rocket.Chat, and Grafana, which use notification template URLs as direct HTTP request targets without validating the target address against private, loopback, or reserved IP ranges. This allows an organization notification administrator to cause the AWX control node to issue HTTP requests to internal or loopback addresses. Additionally, the webhook backend follows HTTP redirects and resends Basic Authentication credentials to redirected hosts, potentially leaking credentials. The Grafana backend sends its API key in the Authorization header to the configured target URL. A fix is available from Red Hat. Join the discussion | GCVE Database | 08/24/2026, 15:42:44 UTC Added: 08/25/2026, 13:38:43 UTC |
Showing 1 to 1 of 1 result