Server-Side Request Forgery (ssrf) - Attack Type

Related Threat Clusters

• Critical Dgraph Database Flaw Allowed Attackers to Bypass Authentication

  A critical vulnerability in the Dgraph database system, tracked as CVE-2026-34976, has been discovered, allowing unauthenticated remote attackers to bypass all security controls. This flaw carries a maximum CVSS score…

  2 articles · Updated April 6, 2026
• Active Exploitation of Microsoft SharePoint Flaw CVE-2026-45659 Confirmed

  The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-45659, a remote code execution vulnerability in Microsoft SharePoint, to its Known Exploited Vulnerabilities catalog due to active…

  2 articles · Updated July 4, 2026
• Critical Authentication Bypass Vulnerability in Spring Authorization Server

  A critical vulnerability, CVE-2026-22752, has been identified in Spring Authorization Server, affecting versions 1.3.0 to 1.3.10, 1.4.0 to 1.4.9, 1.5.0 to 1.5.6, and 7.0.0 to 7.0.4. The flaw allows attackers with a…

  2 articles · Updated July 18, 2026
• Critical SSRF Vulnerability in Cisco Unified CM Exposes Enterprises to Root Access

  Cisco disclosed a critical server-side request forgery (SSRF) vulnerability in its Unified Communications Manager (CVE-2026-20230) on June 3, 2026. This flaw allows attackers with network access to write arbitrary files…

  8 articles · Updated June 4, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  718 articles · Updated February 9, 2026
• Reconnaissance for MCP Servers and AI Credentials Intensifies

  A recent analysis of Apache and ModSecurity logs revealed a surge in internet-wide reconnaissance targeting Model Context Protocol (MCP) servers and AI assistant configuration files. Over a 14-day period, approximately…

  2 articles · Updated July 13, 2026
• Vulnerabilities in Vibe-Coded Applications Highlighted

  Recent analyses of vibe-coded applications reveal common security vulnerabilities due to the nature of AI coding agents. Tenzai's research identified 69 vulnerabilities across five popular coding agents, focusing on…

  2 articles · Updated June 1, 2026
• Langchain Community SSRF Vulnerability Exposes Internal Services

  A Server-Side Request Forgery (SSRF) vulnerability, tracked as CVE-2026-26019, has been discovered in the langchain/community package, affecting versions up to 1.1.13. This flaw has a moderate severity rating and can…

  4 articles · Updated February 17, 2026
• Critical Angular SSR Vulnerability Enables Unauthorized Requests

  A critical vulnerability, tracked as CVE-2026-27739, has been identified in Angular Server-Side Rendering (SSR). This Server-Side Request Forgery (SSRF) flaw allows attackers to manipulate applications into sending…

  6 articles · Updated March 2, 2026
• Microsoft Launches Dusseldorf Open-Source OAST Platform for Vulnerability Detection

  Microsoft has released Dusseldorf, an open-source out-of-band application security testing platform. This tool is designed to identify vulnerabilities that occur when applications interact with external systems, such as…

  2 articles · Updated July 20, 2026

Recent Intelligence Reports

• Microsoft open — Feeds.4Sysops · July 20, 2026
• Cve 2026 22752 — spring.io · July 18, 2026
• Attackers Combine MCP Recon With Cloud Metadata SSRF to Steal Service Account Tokens — Gbhackers · July 13, 2026
• NVD detail — nvd.nist.gov · July 5, 2026
• 918 — cwe.mitre.org · July 2, 2026
• Cisco Unified Communications flaw exploited by hackers — Computing · June 25, 2026
• Critical Cisco Unified CM and SME Flaw Enables Remote Attacker to Launch SSRF Attacks — Cybersecuritynews · June 24, 2026
• Tenzai's own research — pr.report · June 1, 2026

Related Entities