Advisories · Weakness
Server-side request forgery (SSRF).
The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.8 High
Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway
- Splunk Enterprise
- Splunk Secure Gateway
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway
- Splunk Enterprise
- Splunk Secure Gateway
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Termix: Server-Side Request Forgery via Proxy Connectivity Test
- Termix
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
SearXNG MCP Server: Additional hardened-mode SSRF bypasses
- Information disclosure
- Server-side request forgery (SSRF)
<1.2.1 · fixed in 1.2.1
GHSA-wppf-h75h-6pm6 · CVE-2026-54689 - CVSS 6.5 Medium
SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)
- Server-side request forgery (SSRF)
<1.2.1 · fixed in 1.2.1
GHSA-q87f-qc2r-2gw4 · CVE-2026-54688 -
GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)
- Other injection
- Information disclosure
<1.2.4 · fixed in 1.2.4
GHSA-p77j-g7h5-r2vw - CVSS 8.5 High
Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)
- wekan
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Contentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint
- Server-side request forgery (SSRF)
<1.7.19 · fixed in 1.7.19
GHSA-2xhg-73j7-rrgx · CVE-2026-53957 - CVSS 9.3 CriticalCritical · CVSS 9+
Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route
- Red Hat multicluster engine for Kubernetes 2.10
- Red Hat multicluster engine for Kubernetes 2.11
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
keeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebinding
- ridafkih keeper.sh
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability
- Cisco Packaged Contact Center Enterprise
- Cisco Unified Contact Center Enterprise
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols
- grav
- getgrav grav-plugin-api
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Server-side request forgery in Dell OpenManage Enterprise
- Dell OpenManage Enterprise
- Server-side request forgery (SSRF)
- CVSS 8.3 High
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
- ail-project ail-framework
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
- Animation Addons for Elementor
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
<26.7.0 · fixed in 26.7.0
GHSA-7gww-x7fh-jf9j · CVE-2026-84189 - CVSS 7.7 High
Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist
- Server-side request forgery (SSRF)
<1.9.3 · fixed in 1.9.3
GHSA-v5rc-cpwc-cfpr · CVE-2026-71303 - CVSS 6.3 Medium
Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)
- Race condition
- Server-side request forgery (SSRF)
<1.9.3 · fixed in 1.9.3
GHSA-f3qq-49m6-rw8f · CVE-2026-70667 - CVSS 7.4 High
Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs
- Server-side request forgery (SSRF)
<1.9.3 · fixed in 1.9.3
GHSA-xpmj-wjcp-6pww · CVE-2026-70666 - CVSS 6.0 Medium
FUXA: SSRF hardening for `device-webapi-request`
- frangoteam FUXA
- Server-side request forgery (SSRF)
- CVSS 3.0 Low
MobSF has SSRF port restriction bypass in assetlinks_check
- Server-side request forgery (SSRF)
<4.5.1 · fixed in 4.5.1
GHSA-95px-34x5-p37h · CVE-2026-68927 - CVSS 6.3 Medium
MagicMirror: ssrf calendar .js
- Server-side request forgery (SSRF)
- CWE-441
<2.37.0 · fixed in 2.37.0
GHSA-w6x9-28jw-hq7j · CVE-2026-63643 - CVSS 6.3 Medium
MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery
- Server-side request forgery (SSRF)
<2.37.0 · fixed in 2.37.0
GHSA-998g-7v5w-cr7g · CVE-2026-63642 - CVSS 7.7 High
Awx: webhook status callback ssrf leaks the git pat
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Server-side request forgery (SSRF)
- CVSS 9.6 CriticalCritical · CVSS 9+
Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf
- Red Hat Ansible Automation Platform 2.4 for RHEL 8
- Red Hat Ansible Automation Platform 2.4 for RHEL 9
- Server-side request forgery (SSRF)
- CVSS 4.3 Medium
MyBB: IPv6 SSRF
- mybb
- Server-side request forgery (SSRF)
- CVSS 8.4 High
RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component
- infiniflow ragflow
- Server-side request forgery (SSRF)
- CVSS 7.2 High
WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability
- Brainstorm Force OttoKit
- Server-side request forgery (SSRF)
- CVSS 7.2 High
WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability
- DeKnows PDF Smart Viewer for Elementor
- Server-side request forgery (SSRF)
- CVSS 6.0 Medium
WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability
- apoyl [Aotuman] Grab WeChat Articles
- Server-side request forgery (SSRF)
- CVSS 7.1 High
ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass
- siyuan
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
- Apache Software Foundation Apache SkyWalking MCP
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
- Server-side request forgery (SSRF)
>=3.3.0, <3.15.0 · fixed in 3.15.0
GHSA-7gwp-5pfp-969j · CVE-2026-64849 - CVSS 8.6 High
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
- Authentication bypass
- Server-side request forgery (SSRF)
<=0.5.4 · no fixed version yet
GHSA-8g4w-4ffg-8vgx · CVE-2026-56677 - CVSS 6.3 Medium
Server-side request forgery in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Server-side request forgery (SSRF)
- CVSS 5.4 Medium
Server-side request forgery in JetBrains IntelliJ IDEA
- JetBrains IntelliJ IDEA
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery
- jae-jae fetcher-mcp
- Server-side request forgery (SSRF)
- CVSS 5.8 Medium
Server-side request forgery in Roundcube Webmail
- Roundcube Webmail
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery
- Kira-Pgr PromptShopMCP
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure
- WooMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
jkawamoto mcp-florence2 __init__.py get_images server-side request forgery
- jkawamoto mcp-florence2
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors dir…
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
graphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery
- graphlit-mcp-server
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery
- gomarble-ai facebook-ads-mcp-server
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass
- stoatchat
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
- wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery
- OpenBoxes
- Server-side request forgery (SSRF)
- CVSS 4.2 Medium
Quay: ssrf via build archive_url in quay build api
- Red Hat OpenShift Update Service
- Red Hat Quay 3
- Server-side request forgery (SSRF)
- CVSS 6.6 Medium
ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)
- Race condition
- Server-side request forgery (SSRF)
<1.0.3 · fixed in 1.0.3
GHSA-9hgc-g3w5-67cm · CVE-2026-53708 - CVSS 7.1 High
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
- Server-side request forgery (SSRF)
<3.41.3 · fixed in 3.41.3
GHSA-5fpj-28rv-84r7 · CVE-2026-35219 - CVSS 4.8 Medium
feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery
- feedmob fm-mcp-servers
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery
- eyaushev swagger-testcase-mcp
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgery
- Model Context Protocol mcp-rdf-explorer
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery
- EnzoVezzaro mcp-dominican-layer
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery
- EnzoVezzaro mcp-dominican-layer
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()
- flytohub flyto-core
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url
- DayuanJiang next-ai-draw-io
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
- Server-side request forgery (SSRF)
>=1.65.0, <1.106.0 || >=2.0.0b1, <2.0.0b6 · fixed in 1.106.0, 2.0.0b6
GHSA-h7p7-w5gc-xj3w · CVE-2026-54249