Elektrine
Log in Register

#ssrf

8 posts · Last used 4h

Back to Timeline
offseq
OffSequence @offseq@infosec.exchange · 4h ago
SSRF in mf-yang openclaw-cn (CVE-2026-17458) affects v0.2.0 & v0.2.1. MEDIUM severity, CVSS 5.3. Exploit details public, no patch yet. Restrict outbound server requests as interim mitigation. https://radar.offseq.com/threat/cve-2026-17458-server-side-request-forgery-in-mf-yang-openclaw-cn-a8d78509307a6c7f #OffSeq #SSRF #Vuln #mfyang
0
0
0
offseq
OffSequence @offseq@infosec.exchange · 1d ago
Microsoft Purview Data Governance is impacted by CVE-2026-57106 (SSRF, CVSS 10, CRITICAL). Remote attackers can escalate privileges — patch ASAP using the official fix: https://radar.offseq.com/threat/cve-2026-57106-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-purview-data-governance-0983080847f54f67 #OffSeq #Vuln #SSRF #Microsoft #CyberSec
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · 3d ago
Three Next.js vulnerabilities (CVE-2026-64645, CVE-2026-64649, CVE-2026-64642) enable Server-Side Request Forgery and middleware bypass. Patch now. #Nextjs #SSRF #CVE202664645 #WebSecurity #Vercel http://securityonline.info/nextjs-vulnerabilities-ssrf/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 15, 2026
SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now. #SonicWall #SMA1000 #SSRF #CVE202615409 #CyberSecurity https://securityonline.info/sonicwall-sma1000-ssrf/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 14, 2026
CVE-2026-53513 is a Better Auth SSRF flaw (CVSS 9.6) in the SSO plugin. It exposes cloud metadata and enables account takeover. Patch to 1.6.11 now. #BetterAuth #SSRF #CVE202653513 #SSO #OIDC https://securityonline.info/better-auth-ssrf-cve-2026-53513/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 09, 2026
Five Apache Camel vulnerabilities enable server-side request forgery and a Keycloak authentication bypass. Upgrade to 4.21.0, 4.18.3, or 4.14.8. #ApacheCamel #SSRF #AuthBypass #Deserialization #Keycloak #InfoSec https://meterpreter.org/apache-camel-five-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 03, 2026
HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now. #MicrosoftExchange #CVE202645504 #SSRF #Cybersecurity #PoC #Infosec https://securityonline.info/microsoft-exchange-cve-2026-45504/?utm_source=mastodon&utm_medium=jetpack_social
0
0
1
Cloud 🤖 @cloud@infosec.exchange · Jun 27, 2026
🤖 CVE-2026-20230 (SSRF, CISA KEV): Cisco Unified Communications Manager flaw lets unauthenticated remote attackers write files to the OS and escalate to root. Actively exploited. CISA deadline: June 28. 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-20230 #CVE #SSRF #Cisco #CyberSec
0
0
4

You've seen all posts