# Server-side request forgery (SSRF). The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first - [Kubeflow Pipelines: Unauthenticated SSRF through artifact provider endpoints](https://agentprime.io/advisories/CVE-2026-88981.md) `CVE-2026-88981` · CVE record: kubeflow pipelines · CVSS 8.6 High · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Kubeflow Pipelines: Unauthenticated server-side request forgery in the frontend http/https artifact source via decimal-IP bypass of the bucket validator](https://agentprime.io/advisories/CVE-2026-88980.md) `CVE-2026-88980` · CVE record: kubeflow pipelines · CVSS 8.6 High · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Kubeflow Pipelines: Unauthenticated SSRF vulnerability in Kubeflow Pipelines TensorBoard proxy](https://agentprime.io/advisories/CVE-2026-88979.md) `CVE-2026-88979` · CVE record: kubeflow pipelines · CVSS 5.8 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF) - [Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation](https://agentprime.io/advisories/CVE-2026-88983.md) `CVE-2026-88983` · CVE record: kubeflow pipelines · CVSS 5.0 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF), CWE-441 - [KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF](https://agentprime.io/advisories/CVE-2026-81190.md) `CVE-2026-81190` · CVE record: kurrent-io KurrentDB · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Path traversal, Server-side request forgery (SSRF) - [SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response Disclosure](https://agentprime.io/advisories/CVE-2026-69137.md) `CVE-2026-69137` · CVE record: SuiteCRM SuiteCRM · CVSS 7.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Posta before v0.18.0 SSRF via Webhook URL](https://agentprime.io/advisories/CVE-2026-123204.md) `CVE-2026-123204` · CVE record: goposta posta · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API](https://agentprime.io/advisories/CVE-2026-123201.md) `CVE-2026-123201` · CVE record: jarun buku · CVSS 6.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [SuiteCRM: isSelfRequest() bypass via substring match allows SSRF to internal services](https://agentprime.io/advisories/CVE-2026-61649.md) `CVE-2026-61649` · CVE record: SuiteCRM SuiteCRM · CVSS 7.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [SuiteCRM: Non-admin user creates SchedulersJob: SSRF via cron](https://agentprime.io/advisories/CVE-2026-63111.md) `CVE-2026-63111` · CVE record: SuiteCRM SuiteCRM · CVSS 7.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control, Server-side request forgery (SSRF) - [Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypass](https://agentprime.io/advisories/CVE-2026-123125.md) `CVE-2026-123125` · CVE record: sensiolabs symfony · CVSS 6.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF), CWE-184 - [Server-side request forgery in Trellix DLP on-prem extensions](https://agentprime.io/advisories/CVE-2026-115740.md) `CVE-2026-115740` · CVE record: Trellix DLP on-prem extensions · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Apache OFBiz: Server-side request forgery in SurveyWrapper](https://agentprime.io/advisories/CVE-2026-81828.md) `CVE-2026-81828` · CVE record: Apache Software Foundation Apache OFBiz · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Apache OFBiz: Unfiltered server-side URL fetch in webtools viewdatafile](https://agentprime.io/advisories/CVE-2026-82902.md) `CVE-2026-82902` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 4.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control, Server-side request forgery (SSRF) - [Symfony: NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports (Incomplete Fix for CVE-2024-50342)](https://agentprime.io/advisories/CVE-2026-123119.md) `CVE-2026-123119` · CVE record: sensiolabs symfony · CVSS 2.3 Low · Not analysed yet · Published 5 Nov 2026 · Tags: Race condition, Server-side request forgery (SSRF) - [Webmin: SSRF exploit in Upload and Download and File Manager modules](https://agentprime.io/advisories/CVE-2026-102337.md) `CVE-2026-102337` · CVE record: webmin webmin · CVSS 4.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy](https://agentprime.io/advisories/CVE-2026-57566.md) `CVE-2026-57566` · CVE record: readest readest · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [draw.io: Incomplete SSRF blocklist in \`ProxyServlet\` / \`Utils.sanitizeUrl\`: RFC 6598 CGNAT range \`100.64.0.0/10\` is not blocked -> server-side request to internal CGNAT hosts](https://agentprime.io/advisories/CVE-2026-97373.md) `CVE-2026-97373` · CVE record: jgraph drawio · CVSS 5.8 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypass](https://agentprime.io/advisories/CVE-2026-122140.md) `CVE-2026-122140` · CVE record: germondai trawl · CVSS 6.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery](https://agentprime.io/advisories/CVE-2026-122009.md) `CVE-2026-122009` · CVE record: DataLinkDC Dinky · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [InfiniFlow RAGFlow Seafile Connector seafile_connector.py \_account_get server-side request forgery](https://agentprime.io/advisories/CVE-2026-121927.md) `CVE-2026-121927` · CVE record: InfiniFlow RAGFlow · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Oqtane Framework before 10.3.0 SSRF via File Upload From URL](https://agentprime.io/advisories/CVE-2026-122008.md) `CVE-2026-122008` · CVE record: oqtane oqtane.framework · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API](https://agentprime.io/advisories/CVE-2026-121936.md) `CVE-2026-121936` · CVE record: cosin2077 easyVoice · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Multiple vulnerabilities in Coupa’s Total Spend Management Platform](https://agentprime.io/advisories/CVE-2026-111036.md) `CVE-2026-111036` · CVE record: Coupa Coupa Total Spend Management Platform · CVSS 8.4 High · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-Path](https://agentprime.io/advisories/CVE-2026-118422.md) `CVE-2026-118422` · CVE record: Unknown Stape Conversion Tracking · CVSS 7.1 High · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [PowerPack Addons for Elementor 2.10.0 - 3.1.2 - Contributor+ SSRF via Charts Widget CSV Import](https://agentprime.io/advisories/CVE-2026-110692.md) `CVE-2026-110692` · CVE record: Unknown PowerPack Addons for Elementor: Widgets, Form Styler and Templates · CVSS 4.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Server-side request forgery (SSRF) - [MLflow get-artifacts Server-Side Request Forgery Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-118628.md) `CVE-2026-118628` · CVE record: MLflow MLflow · CVSS 8.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [ArcReel Provider Test-Connection Endpoint test server-side request forgery](https://agentprime.io/advisories/CVE-2026-121581.md) `CVE-2026-121581` · CVE record: ArcReel · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Server-side request forgery in Devolutions Server](https://agentprime.io/advisories/CVE-2026-120715.md) `CVE-2026-120715` · CVE record: Devolutions Server · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Server-side request forgery in Devolutions Server](https://agentprime.io/advisories/CVE-2026-121580.md) `CVE-2026-121580` · CVE record: Devolutions Server · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Server-Side Request Forgery in Tapo Cloud MQTT Proxy](https://agentprime.io/advisories/CVE-2026-105822.md) `CVE-2026-105822` · CVE record: TP-Link Systems Inc. Tapo Cloud Service · CVSS 8.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Server-side request forgery via SpatialReference string input](https://agentprime.io/advisories/CVE-2026-114582.md) `CVE-2026-114582` · CVE record: djangoproject Django · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Server-side request forgery via crs member of GeoJSON geometries](https://agentprime.io/advisories/CVE-2026-111362.md) `CVE-2026-111362` · CVE record: djangoproject Django · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Label Studio before 1.23.2 SSRF and Token Disclosure via Image Export Downloads](https://agentprime.io/advisories/CVE-2026-121561.md) `CVE-2026-121561` · CVE record: HumanSignal label-studio and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors](https://agentprime.io/advisories/CVE-2026-121431.md) `CVE-2026-121431` · CVE record: AzuraCast AzuraCast · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass](https://agentprime.io/advisories/CVE-2026-121422.md) `CVE-2026-121422` · CVE record: surrealdb surrealdb · CVSS 5.1 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass](https://agentprime.io/advisories/CVE-2026-121421.md) `CVE-2026-121421` · CVE record: surrealdb surrealdb · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses](https://agentprime.io/advisories/CVE-2026-121420.md) `CVE-2026-121420` · CVE record: surrealdb surrealdb · CVSS 4.8 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures](https://agentprime.io/advisories/CVE-2026-89292.md) `CVE-2026-89292` · CVE record: Eclipse Foundation Eclipse Mnestix · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF) - [TYPO3-EXT-SA-2026-037: Server-Side Request Forgery in extension "Mail" (mail)](https://agentprime.io/advisories/PKSA-spg7-jb73-vpnk.md) `PKSA-spg7-jb73-vpnk`, `CVE-2026-120331` · Packagist `mediaessenz/mail`: affected `<3.12.5 || >=4.0.0, <4.2.0`, fixed in `3.12.5`, `4.2.0` · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter](https://agentprime.io/advisories/CVE-2026-105967.md) `CVE-2026-105967` · CVE record: Unknown Gallery for Social Photo · CVSS 5.8 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Server-side request forgery (SSRF) - [AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery](https://agentprime.io/advisories/CVE-2026-120416.md) `CVE-2026-120416` · CVE record: AndyFactory newspaper4k · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Rancher meta proxy allowlist bypass leading to server-side request forgery](https://agentprime.io/advisories/CVE-2026-88809.md) `CVE-2026-88809` · CVE record: SUSE Rancher · CVSS 7.6 High · Not analysed yet · Published 2 Nov 2026 · Tags: Server-side request forgery (SSRF) - [Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials](https://agentprime.io/advisories/CVE-2026-74759.md) `CVE-2026-74759` · CVE record · No CVSS score · Not analysed yet · Published 1 Nov 2026 · Tags: Server-side request forgery (SSRF) - [signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher](https://agentprime.io/advisories/GHSA-7wpf-ch8f-5f4x.md) `GHSA-7wpf-ch8f-5f4x`, `CVE-2026-115752` · npm `signalk-server`: affected `>=2.28.0-beta.2, <2.34.0`, fixed in `2.34.0` · CVSS 2.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571](https://agentprime.io/advisories/GHSA-c6q7-wqw2-h65w.md) `GHSA-c6q7-wqw2-h65w`, `CVE-2026-54442` · Maven `gov.nsa.emissary:emissary`: affected `<8.51.0`, fixed in `8.51.0` · CVSS 4.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion](https://agentprime.io/advisories/CVE-2026-63184.md) `CVE-2026-63184` · CVE record: christianhelle refitter · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-829 - [Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read](https://agentprime.io/advisories/CVE-2026-119343.md) `CVE-2026-119343` · CVE record: Stirling-Tools Stirling-PDF · CVSS 6.8 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal, Server-side request forgery (SSRF) - [Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass](https://agentprime.io/advisories/CVE-2026-119342.md) `CVE-2026-119342` · CVE record: Stirling-Tools Stirling-PDF · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-20, CWE-610 - [pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name](https://agentprime.io/advisories/CVE-2026-116252.md) `CVE-2026-116252` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Command injection, Hard-coded credentials, Server-side request forgery (SSRF) - [PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)](https://agentprime.io/advisories/CVE-2026-55598.md) `CVE-2026-55598` · CVE record: madeofpendletonwool PinePods · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy](https://agentprime.io/advisories/CVE-2026-62284.md) `CVE-2026-62284` · CVE record: osac-project osac-operator · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection, Server-side request forgery (SSRF) - [Quest Bot: Server Side Request Forgery in the Image to GIF Feature Lets Any Server Member Reach Internal Services](https://agentprime.io/advisories/CVE-2026-61840.md) `CVE-2026-61840` · CVE record: vantern-org questbot · CVSS 2.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents](https://agentprime.io/advisories/CVE-2026-119712.md) `CVE-2026-119712` · CVE record: pipeshub-ai pipeshub-ai · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata](https://agentprime.io/advisories/CVE-2026-119709.md) `CVE-2026-119709` · CVE record: goniszewski grimoire · CVSS 6.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Campfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard](https://agentprime.io/advisories/CVE-2026-100355.md) `CVE-2026-100355` · CVE record: basecamp once-campfire · CVSS 3.1 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List](https://agentprime.io/advisories/CVE-2026-119575.md) `CVE-2026-119575` · CVE record: ArcadeData arcadedb · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Server-side request forgery in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-101209.md) `CVE-2026-101209` · CVE record: Dell OpenManage Enterprise · CVSS 2.7 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images](https://agentprime.io/advisories/CVE-2026-119549.md) `CVE-2026-119549` · CVE record: jellyfin jellyfin · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery](https://agentprime.io/advisories/CVE-2026-119545.md) `CVE-2026-119545` · CVE record: forgejo forgejo · CVSS 6.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF) Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .