Cwe-918 - Server-Side Request Forgery (ssrf) - Cwe

Related Threat Clusters

• Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

  SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

  30 articles · Updated July 15, 2026
• Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems

  Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…

  131 articles · Updated May 14, 2026
• Critical Exploitation of Cisco CM and Samsung KNOX Vulnerabilities

  Active exploitation of two critical vulnerabilities has been reported: CVE-2026-20230 in Cisco Unified CM and CVE-2026-20971 in Samsung KNOX. The Cisco flaw, a server-side request forgery (SSRF), poses an immediate…

  4 articles · Updated June 23, 2026
• Critical CVE-2025-34291 in Langflow AI Agent Under Active Exploitation

  CVE-2025-34291 is a critical vulnerability affecting Langflow, an open-source AI agent platform, allowing attackers to take over accounts and execute arbitrary code. Disclosed on December 5, 2025, this vulnerability has…

  47 articles · Updated May 30, 2026
• Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015

  A pre-authentication remote code execution (RCE) vulnerability, CVE-2026-35273, was discovered in Oracle PeopleSoft PeopleTools, affecting versions 8.61 and 8.62. The vulnerability allows unauthenticated attackers to…

  5 articles · Updated June 18, 2026
• Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

  Recent updates to RoundcubeMail for Fedora 43 and 44 revealed critical vulnerabilities, including SQL injection and cross-site scripting (XSS) issues. CVE-2026-48842 details a pre-auth SQL injection in the…

  2 articles · Updated June 4, 2026
• Critical Vulnerabilities in Fluentd Enable Remote Code Execution and SSRF

  Fluentd v1.19.3 addresses multiple vulnerabilities, including a critical RCE flaw tracked as CVE-2026-44024. These vulnerabilities can allow unauthenticated remote attackers to execute arbitrary code, access sensitive…

  5 articles · Updated July 1, 2026
• Cisco Unity Connection Vulnerabilities Enable Code Execution and SSRF Attacks

  Cisco has released security advisories addressing multiple high-severity vulnerabilities in its Unity Connection product. The most critical flaws allow authenticated attackers to inject and execute malicious code…

  7 articles · Updated May 7, 2026
• Active Exploitation of Microsoft SharePoint Flaw CVE-2026-45659 Confirmed

  The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-45659, a remote code execution vulnerability in Microsoft SharePoint, to its Known Exploited Vulnerabilities catalog due to active…

  2 articles · Updated July 4, 2026
• Cisco Confirms Active Exploitation of Unified CM Vulnerability CVE-2026-20230

  Cisco has confirmed that attackers are exploiting a vulnerability in its Unified Communications Manager (Unified CM), tracked as CVE-2026-20230, which was patched on June 3, 2026. This vulnerability allows for…

  2 articles · Updated July 2, 2026

Recent Intelligence Reports

• Microsoft open — Feeds.4Sysops · July 20, 2026
• Fedora 44 Erlang Important Denial Of Service Auth Bypass CVE-2026 — Linuxsecurity · July 19, 2026
• Fedora 43 Erlang Critical Auth Bypass DoS Vulnerability Fix 2026 — Linuxsecurity · July 19, 2026
• Cve 2026 22752 — spring.io · July 18, 2026
• CVE-2026-15409 — nvd.nist.gov · July 17, 2026
• SonicWall SMA1000 vulnerabilities in active exploitation — Sophos · July 15, 2026
• CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero — Tenable · July 15, 2026
• CC-4813 — Digital.Nhs.Uk · July 15, 2026

Related Entities