By weakness (CWE)

CWE-918: related vulnerabilities

CVEs classified under CWE-918. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

50 published vulnerabilities

• CVE-2026-45504HIGH 8.8

  CVE-2026-45504 is a server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server that allows an authenticated attacker to escalate their privileges across the network. Because the vulnerability requires valid credentials to exploit, the immediate risk is contained to authorized users—however, any user account (even low-privileged ones) can potentially pivot to higher access levels within the Exchange environment and potentially beyond. With a CVSS score of 8.8, this is rated HIGH severity and merits prompt patching.

• CVE-2026-44797HIGH 8.5

  Nautobot, a network automation and source-of-truth platform, contains a webhook configuration vulnerability that allows authenticated users to craft requests to internal hosts and IP addresses they should not be able to reach. This is functionally similar to server-side request forgery (SSRF) attacks, where the application itself becomes a proxy for malicious requests. An attacker with sufficient access could abuse this to scan internal networks, access restricted services, or exfiltrate data. The issue affects Nautobot versions prior to 2.4.33 and 3.1.2.

• CVE-2026-46372HIGH 8.5

  SillyTavern, a local application for interacting with AI language models and voice services, contains a server-side request forgery (SSRF) vulnerability in its search API endpoint. An authenticated user with low privileges can manipulate the baseUrl parameter to force the server to make requests to internal or loopback services, then view the responses. This allows attackers to probe or exfiltrate data from systems that should only be accessible internally. The flaw affects all versions before 1.18.0 and has been patched in that release.

• CVE-2026-49120HIGH 8.5

  Medplum versions before 5.1.14 contain a vulnerability that allows authenticated users to make the server reach out to internal network addresses and systems that should be isolated. An attacker with valid credentials can create subscription configurations that trick the system into fetching or sending data to sensitive internal targets like cloud credential stores or databases. This enables attackers to steal credentials and patient health information that would normally only be accessible to administrators.

• CVE-2026-45503HIGH 8.1

  CVE-2026-45503 is a HIGH severity vulnerability in Microsoft Exchange Server that allows an already-authenticated attacker to access sensitive information over the network without user interaction. The flaw stems from improper authorization controls—meaning the server fails to properly verify what an authorized user should be allowed to see. An attacker with valid Exchange credentials can exploit this to read data they shouldn't have access to, such as emails, calendar entries, or other mailbox contents.

• CVE-2026-10107HIGH 7.7

  MoviePilot v2 has a security flaw in its image proxy feature that lets authenticated users access internal network resources they shouldn't be able to reach. An attacker with valid login credentials can trick the proxy into fetching files or services from private networks—like personal media servers—by crafting requests with specific cookies and domain names. The vulnerability exists because the security check only verifies that a domain name appears to be allowed, but doesn't block access to internal, private, or loopback addresses. This means an attacker could map out internal services or steal data from them.

• CVE-2026-42398HIGH 7.7

  CVE-2026-42398 is a Server-Side Request Forgery (SSRF) vulnerability in Kibana that allows authenticated users with connector management privileges to circumvent network egress restrictions. An attacker with the right permissions can configure a malicious Webhook connector that tricks Kibana into making outbound HTTP requests to internal or restricted destinations that should have been blocked by the organization's firewall or allowlist policies. This effectively punches through network security controls by leveraging Kibana's own trusted outbound connection capability.

• CVE-2026-42965HIGH 7.7

  OpenShift Router contains a flaw that allows users with EndpointSlice write permissions to redirect traffic through the router to cloud metadata endpoints. By crafting a Service backed by an FQDN-based EndpointSlice pointing to a cloud metadata service, an attacker can intercept and read sensitive instance credentials and metadata that should never be exposed. This circumvents existing IP address validation protections designed to block such access.

• CVE-2026-44285HIGH 7.7

  FastGPT, an AI Agent building platform, contains a Server-Side Request Forgery (SSRF) vulnerability in versions before 4.15.0-beta1. An authenticated user can bypass the platform's internal network protection and send HTTP requests to services on the internal network that should be inaccessible. The flaw exists in the dataset preview feature when using the externalFile import type. This allows an attacker with valid credentials to potentially access sensitive internal services, databases, or administrative endpoints that are normally restricted from external access.

• CVE-2026-49372HIGH 7.5

  JetBrains TeamCity versions prior to 2026.1 and 2025.11.5 contain a server-side request forgery (SSRF) vulnerability accessible without authentication. An attacker can abuse the build status feature to make the TeamCity server perform unintended HTTP requests to internal or external systems, potentially exposing sensitive data or accessing restricted resources. The vulnerability requires no user interaction and can be exploited over the network.

• CVE-2026-45310HIGH 7.4

  CodeWhale, a terminal-based AI coding agent, contains a server-side request forgery (SSRF) vulnerability in versions prior to 0.8.22. The application attempts to block requests to sensitive internal services by checking whether the initial URL points to a restricted IP address. However, attackers can bypass this protection by crafting a URL that initially resolves to an allowed address but redirects to an internal service—such as cloud metadata endpoints or localhost—because the HTTP client automatically follows redirects without re-checking the security blocklist. This allows an attacker to trick CodeWhale into making requests to internal systems that should be off-limits.

• CVE-2026-45373HIGH 7.4

  CodeWhale, a terminal-based coding agent that integrates DeepSeek and MiMo AI models, contains a server-side request forgery (SSRF) vulnerability in versions prior to 0.8.26. The vulnerability exists because SSRF validation checks fail when IPv6 addresses are specified using bracket notation (e.g., http://[::1]). An attacker can bypass the SSRF defenses by crafting URLs with IPv6 localhost or other restricted addresses in this format, potentially allowing unauthorized access to internal services or metadata endpoints that the CodeWhale process can reach from its host environment.

• CVE-2026-48555HIGH 7.4

  Spatie's Laravel Media Library, a popular file management package for Laravel applications, contains a server-side request forgery (SSRF) vulnerability in versions prior to 11.23.0. The flaw exists in the addMediaFromUrl() method, which accepts user-controlled URLs without proper validation. An attacker with authenticated access can exploit this to force the server to make arbitrary outbound HTTP requests on their behalf, potentially reaching internal systems, cloud metadata endpoints, or external targets that the server can access but the attacker cannot directly reach.

• CVE-2026-10068HIGH 7.3

  A server-side request forgery (SSRF) vulnerability has been identified in Shibby Tomato version 1.28, specifically within the miniupnpd daemon's SUBSCRIBE call handler. An attacker can exploit this flaw remotely without authentication to make the affected device perform unintended network requests on their behalf. This could lead to unauthorized access to internal services, data exfiltration, or lateral movement within a network. However, the practical impact is limited since Shibby Tomato is no longer maintained, with the project having been superseded by FreshTomato.

• CVE-2026-10280HIGH 7.3

  Horizon921's mcpilot version 0.1.0 contains a server-side request forgery (SSRF) vulnerability in its MCP API Call Endpoint. An attacker can manipulate the serverBaseUrl parameter to trick the application into making requests to arbitrary internal or external systems. Because this requires no authentication and can be exploited over the network, it represents a meaningful attack surface for anyone running this software. The flaw has already been disclosed publicly and exploit code is available.

• CVE-2026-10287HIGH 7.3

  A server-side request forgery (SSRF) vulnerability exists in SourceCodester SEO Meta Tag Extractor version 1.0. An attacker can manipulate the URL parameter passed to the get_headers function in /index.php to make the vulnerable server perform requests on their behalf—potentially accessing internal services, exfiltrating data, or launching attacks against other systems on the network. No authentication is required, and the flaw can be exploited remotely over the network. Public exploit code is already available.

• CVE-2026-10771HIGH 7.3

  A server-side request forgery (SSRF) vulnerability exists in CRMEB Java version 1.4. An attacker can manipulate the URL parameter in the RestTemplate.getForEntity function to force the server to make unintended outbound requests. This occurs in the QR code generation endpoint and requires no authentication. Since exploit code has been publicly disclosed, the risk of active exploitation is elevated.

• CVE-2026-11437HIGH 7.3

  A vulnerability in go-fastdfs-web versions up to 1.3.7 allows attackers to make the affected server fetch or interact with arbitrary external resources without authorization. An unauthenticated attacker can manipulate a parameter in the installation endpoint's server check function to trigger server-side requests to unintended destinations. This is particularly dangerous because the server performs actions on behalf of the attacker, potentially accessing internal systems, exfiltrating data, or pivoting to other infrastructure that trusts the vulnerable server.

• CVE-2026-10586HIGH 7.2

  The Gutenberg Essential Blocks plugin for WordPress contains a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated users with Author-level permissions or higher to make unauthorized web requests from the vulnerable server. An attacker could use this flaw to communicate with internal services, potentially extracting sensitive information or modifying data that should only be accessible internally. The vulnerability exists in the image generation feature and affects all versions through 6.1.3.

• CVE-2026-45609HIGH 7.2

  mcp-security, a Spring AI component that manages security and authorization for the Model Context Protocol, contains a Server-Side Request Forgery (SSRF) vulnerability in versions before 0.1.9. When Dynamic Client Registration is enabled, the framework processes OAuth discovery and metadata URLs without properly validating them, allowing an attacker to redirect requests to internal network resources or malicious endpoints. This could lead to information disclosure or unauthorized actions on systems the application can reach.

• CVE-2026-26379MEDIUM 6.5

  Koha, an open-source library management system, contains a Server-Side Request Forgery (SSRF) vulnerability in its Z39.50/SRU server configuration. An authenticated attacker can exploit this flaw to scan the internal network and discover which services are running by measuring how the server responds to requests. This vulnerability affects Koha versions up to and including 25.11.

• CVE-2026-45501MEDIUM 6.5

  CVE-2026-45501 is a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server that allows an authenticated attacker to manipulate the server into making requests on their behalf, potentially enabling network-based spoofing attacks. The vulnerability requires valid credentials to exploit, limiting its immediate blast radius, but poses a meaningful risk for organizations where internal attackers or compromised user accounts exist. The vulnerability affects multiple versions of Exchange Server and Exchange Server Subscription Edition.

• CVE-2026-45619MEDIUM 6.5

  WWBN AVideo, an open-source video hosting platform, contains a DNS-rebinding vulnerability in its Server-Side Request Forgery (SSRF) protections. When the application checks whether a URL is safe to fetch, it validates the domain name but then makes the actual network request without

• CVE-2026-5737MEDIUM 6.5

  The Independent Analytics WordPress plugin has a flaw that lets unauthenticated attackers make the server fetch files from anywhere on the internet or internal networks. The issue stems from two weaknesses: the plugin accepts attacker-controlled domain names via a public API endpoint, and a background job that downloads favicons doesn't validate where those requests go. By crafting a request with a forged signature (which is feasible because the signing key is embedded in public JavaScript), an attacker can inject a malicious domain into the database. When the favicon fetcher runs, it will make requests to that domain on behalf of your server, potentially exposing internal services or exfiltrating data.

• CVE-2026-9557MEDIUM 6.4

  Mautic's Focus component contains a Server-Side Request Forgery (SSRF) flaw that allows authenticated users to manipulate the application into making HTTP requests on their behalf. An attacker with valid credentials can craft specially-formed URLs to probe the internal network, access services that should only be reachable from within the organization, or force the server to make requests to external systems. The vulnerability requires authentication, which limits the immediate attack surface but still poses a meaningful risk to organizations where user accounts are shared, compromised, or granted to untrusted users.

• CVE-2026-10177MEDIUM 6.3

  Aider-AI's Aider version 0.86.3 contains a server-side request forgery (SSRF) vulnerability in its AWS EC2 metadata endpoint handling. An authenticated attacker can exploit the requests.get function in api_docs.py to make the application fetch resources from arbitrary locations, potentially accessing sensitive internal services or metadata. The vulnerability is remotely exploitable and public disclosure has already occurred.

• CVE-2026-10239MEDIUM 6.3

  JeecgBoot, an open-source low-code application development platform, contains a server-side request forgery (SSRF) vulnerability in its word document editing module. Specifically, the `WordUtil.addImage` function in the `/airag/word/edit` endpoint fails to properly validate image URLs, allowing an authenticated attacker to manipulate the application into making arbitrary HTTP requests on behalf of the server. This could expose internal resources, bypass firewalls, or facilitate lateral movement within a network. The vulnerability affects JeecgBoot versions up to and including 3.9.2 and has been publicly disclosed.

• CVE-2026-10240MEDIUM 6.3

  JeecgBoot versions up to 3.9.2 contain a server-side request forgery (SSRF) vulnerability in the /airag/airagModel/test endpoint. An authenticated attacker can manipulate the baseUrl parameter to make the server perform unintended HTTP requests to internal or external systems. The vulnerability requires login credentials but does not require user interaction, and can be exploited over the network. A fix is planned for an upcoming release.

• CVE-2026-10241MEDIUM 6.3

  JimuReport (jeecgboot) versions up to 3.9.1 contain a server-side request forgery (SSRF) vulnerability in a file download function exposed via a debug endpoint. An authenticated attacker can manipulate the application into making arbitrary network requests on behalf of the server, potentially accessing internal resources, cloud metadata, or other services not directly exposed to the internet. The vulnerability is reachable over the network and exploit code is publicly available.

• CVE-2026-10274MEDIUM 6.3

  A server-side request forgery (SSRF) vulnerability exists in the aem-mcp-server project maintained by indrasishbanerjee. The flaw is in the getAssetMetadata function, which processes an assetPath parameter without proper validation. An authenticated attacker can manipulate this parameter to cause the server to make unintended HTTP requests to internal or external systems, potentially accessing sensitive data or interacting with restricted resources. The vulnerability is publicly known and exploit code may be in circulation.

• CVE-2026-10276MEDIUM 6.3

  A server-side request forgery (SSRF) vulnerability exists in Jenkins-server-mcp version 0.1.0, a Jenkins integration tool. An authenticated attacker can manipulate the jobPath parameter in build status, log retrieval, or build trigger operations to make the server issue malicious requests to internal or external systems. The vulnerability requires valid login credentials but no user interaction, and the exploit code has already been made public.

• CVE-2026-10581MEDIUM 6.3

  DedeCMS 5.7.88 contains a server-side request forgery (SSRF) vulnerability in its download functionality. An authenticated attacker can manipulate the Link parameter passed to the base64_decode function in /plus/download.php to cause the server to make unintended requests to internal or external systems. This allows an attacker with login credentials to potentially access restricted resources, exfiltrate data, or pivot to other systems on the network.

• CVE-2026-10662MEDIUM 6.3

  A server-side request forgery (SSRF) vulnerability exists in ahujasid blender-mcp, a tool that handles ZIP file operations. An authenticated attacker can manipulate the ZIP file URL parameter to force the server to make HTTP requests to arbitrary internal or external systems. This could allow an attacker to access sensitive internal services, exfiltrate data, or pivot deeper into a network. The vulnerability affects versions up to commit 7636d13, and a patch is available.

• CVE-2026-10690MEDIUM 6.3

  A server-side request forgery (SSRF) vulnerability exists in DesktopCommanderMCP version 0.2.37. The flaw allows authenticated attackers to manipulate URL parameters passed to the read_file function, enabling the server to make arbitrary HTTP requests on behalf of the attacker. This could expose internal services, exfiltrate data, or compromise systems that trust the affected server.

• CVE-2026-49093MEDIUM 6.3

  CVE-2026-49093 is a Server-Side Request Forgery (SSRF) vulnerability in Kibana that allows authenticated users with connector management privileges to circumvent network egress controls. An attacker with these privileges can craft malicious connector configurations that cause the Kibana server to make outbound requests to internal or otherwise-blocked destinations, defeating the intent of operator-configured allowlists. This requires authentication and specific administrative permissions, but poses a meaningful risk to organizations using Kibana connectors for alerting, webhooks, or integrations.

• CVE-2026-10517MEDIUM 5.8

  Clair, a container image scanning tool, has a server-side request forgery (SSRF) vulnerability in its fetcher component. When processing container manifests, Clair can be tricked into making HTTP requests to attacker-controlled URLs without proper validation. An attacker who is unauthenticated can submit a malicious manifest pointing to internal services or cloud metadata endpoints, causing Clair to reach out to those targets. When the request fails, error messages leak up to 256 bytes of the response, potentially exposing sensitive information like API credentials or internal configuration. Red Hat Quay deployments that are operator-managed are automatically protected because they enable pre-shared key (PSK) authentication by default; self-managed Clair installations without PSK are at risk.

• CVE-2026-49129MEDIUM 5.8

  Music Player Daemon (MPD) versions before 0.24.11 contain a server-side request forgery (SSRF) vulnerability in its URL-fetching code. An attacker can craft a malicious HTTP server that redirects MPD to access protocols like FTP, LDAP, or others that the application should not reach. By triggering MPD commands that fetch remote content—such as adding tracks, reading metadata, or loading playlists—an attacker can probe or interact with internal network services on vulnerable systems, potentially exposing sensitive information or enabling further attacks. No authentication is required, and the attack works over the network.

• CVE-2026-45660MEDIUM 5.4

  Statamic is a content management system built on Laravel that includes an image proxy feature called Glide. A flaw in how this proxy validates URLs allows attackers to bypass security checks by using alternate IP address formats that aren't properly normalized before validation. An unauthenticated attacker could exploit this to make the server fetch content from internal addresses—such as localhost, private networks, or cloud metadata services—potentially exposing sensitive information. The vulnerability only affects Statamic versions before 5.73.22 and 6.18.1, and does not impact deployments running PHP 8.3 or later.

• CVE-2026-49328MEDIUM 5.3

  A Server-Side Request Forgery (SSRF) vulnerability exists in Apache Fesod's image URL handling component. When an application built on Fesod processes user-supplied image URLs, an attacker can craft malicious URLs that cause the server to make unexpected outbound requests to internal systems, private cloud metadata services, or other network-restricted resources. This allows attackers to probe or interact with infrastructure that should not be directly accessible from the internet.

• CVE-2026-43979MEDIUM 5.0

  Local Deep Research versions before 1.6.0 contain a vulnerability where user-supplied search queries and metadata are inserted directly into HTML without proper escaping before being converted to PDF. An authenticated user can inject HTML tags that trick the server into making unauthorized web requests (SSRF), bypassing existing security controls. The vulnerability requires valid credentials but poses moderate risk due to potential confidentiality impact.

• CVE-2026-45502MEDIUM 5.0

  A server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server allows an authenticated attacker to make the server issue requests on their behalf, potentially exposing sensitive network information. An attacker with valid credentials can craft requests that cause the Exchange server to connect to internal resources and leak data back to them. This requires prior authentication but poses a meaningful information disclosure risk within trusted network boundaries.

• CVE-2026-46526MEDIUM 5.0

  Local Deep Research versions before 1.6.10 contain a Server-Side Request Forgery (SSRF) vulnerability caused by inconsistent URL validation logic. The application attempts to block malicious URLs using one parsing method but actually sends requests using a different method, creating a gap that attackers can exploit. An authenticated user can craft a specially formatted URL that passes the security checks but reaches an unintended internal or restricted server when the request is actually sent.

• CVE-2026-46561MEDIUM 5.0

  pyLoad, a popular open-source download manager, contains a vulnerability that allows authenticated users to bypass security controls designed to prevent access to internal networks. Specifically, an attacker can craft a specially designed URL that initially appears safe but redirects to a private IP address after the security check passes. This lets the attacker potentially access or interact with systems on the internal network that should be off-limits. The issue affects versions prior to 0.5.0b3.dev100 and has been resolved in that release.

• CVE-2026-49138MEDIUM 5.0

  Nanobot versions prior to 0.2.1 contain a server-side request forgery (SSRF) vulnerability in its web_fetch tool. An attacker with login credentials can trick the application into making requests to internal or private network systems by providing a URL that redirects to a loopback address (like 127.0.0.1) or private IP range. The vulnerability exploits how the underlying httpx library automatically follows HTTP redirects—the application validates the initial URL but not the final destination after redirects are followed, allowing attackers to reach internal services that should not be accessible from the internet.

• CVE-2026-10583MEDIUM 4.7

  A server-side request forgery (SSRF) vulnerability exists in nextlevelbuilder GoClaw versions up to 3.11.3. The flaw is located in the TTS Configuration Endpoint's Import function, which fails to properly validate or restrict outbound HTTP requests. An authenticated attacker with high privileges can exploit this to make the affected server initiate requests to internal or external systems on their behalf, potentially accessing sensitive internal resources or launching further attacks. The vulnerability has been publicly disclosed.

• CVE-2026-11469MEDIUM 4.7

  A vulnerability exists in jishenghua jshERP versions up to 3.6 that allows an authenticated administrator to perform server-side request forgery (SSRF) attacks by manipulating configuration parameters. An attacker with high-level privileges can craft malicious input to the platformConfig add endpoint, causing the server to make unintended requests to internal or external systems. This vulnerability requires authentication and administrative access to exploit, limiting immediate risk but potentially enabling lateral movement or data exfiltration once an admin account is compromised.

• CVE-2026-45366MEDIUM 4.7

  The @utcp/http package in typescript-utcp contains a blind Server-Side Request Forgery (SSRF) vulnerability that allows an attacker to trick the software into making requests to internal services. The flaw stems from inconsistent validation: while manual URL registration checks that URLs are HTTPS or localhost, the tool invocation pathway skips this validation and directly uses URLs from attacker-controlled OpenAPI specifications. An attacker can host a malicious OpenAPI spec on a legitimate HTTPS endpoint that declares internal server addresses (like http://127.0.0.1:9090 or AWS metadata endpoints), and the affected software will create tools that point to those internal targets. Versions prior to 1.1.2 are vulnerable.

• CVE-2026-41854MEDIUM 4.2

  CVE-2026-41854 is a server-side request forgery (SSRF) vulnerability in Spring Framework caused by incorrect parsing of host names in URLs. When an application uses Spring's UriComponentsBuilder to process a URL provided by an external user, an attacker could craft a malicious URL that causes the application to make unintended requests to internal systems or services. The vulnerability affects Spring Framework versions 7.0.0 through 7.0.7 and 6.2.0 through 6.2.18. Exploitation requires user interaction and presents moderate risk.

• CVE-2026-48522MEDIUM 4.2

  PyJWT, a widely-used Python library for JSON Web Token handling, has a vulnerability in versions before 2.13.0 where it blindly accepts any URL scheme when fetching public key sets (JWKS). An attacker who can influence the URL used to fetch these keys—through JWT headers, configuration, or OAuth parameters—can trick the application into reading local files, attempting unusual protocol connections (FTP, data URIs), or in certain chained scenarios, forging valid tokens. The vulnerability requires specific conditions: the attacker must control the URL source, and token forgery scenarios require additional application-layer flaws like writable filesystem access.

• CVE-2026-10052MEDIUM 4.1

  Quay's configuration tool contains a weakness in how it validates LDAP and SMTP settings. When a configuration editor supplies endpoints for these services, the tool connects to them without restricting which IP addresses or hostnames are allowed. An attacker with config editor privileges can abuse this to make the Quay container reach internal network resources, allowing them to map and discover the organization's internal infrastructure from inside the cluster's network position.