CISA Alerts on Exploited GitLab SSRF Vulnerability in Community and Enterprise Editions
Article Content
Browse articles 
CISA has added a critical server-side request forgery (SSRF) vulnerability in GitLab Community and Enterprise editions, tracked as CVE-2021-39935, to its Known Exploited Vulnerabilities catalog. This vulnerability is currently being exploited by threat actors, posing risks to organizations using affected versions of GitLab. The vulnerability was added to the KEV list on February 3, 2026, indicating active exploitation.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track CVE-2021-39935 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
High-Risk SSRF Vulnerability in Privoce VoceChat Server Disclosed A critical vulnerability, CVE-2026-100893, has been identified in the Privoce VoceChat Server up to version 0.5.36. This vulnerability allows remote attackers to exploit the open_graph::fetch function by manipulating the URL parameter, leading to server-side request forgery (SSRF). The attack can be executed without… 
SonicWall Patches SSRF Vulnerability in SMA1000 Appliances SonicWall has released patches for four vulnerabilities in its SMA1000 remote access appliances, including a SSRF vulnerability (CVE-2026-102255) with a CVSS score of 10.0. This flaw allows unauthenticated remote attackers to issue requests on behalf of the appliance, potentially accessing internal functions. The…