Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Back
SSRF
Vulnerability
Threat entity extracted from intelligence sources
Entities
›
vulnerability
›
SSRF
Frequency
33
occurrences
First Seen
November 10, 2025
Last Seen
October 14, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
Cl0p
Associated Malware
DeepSeek-R1
Tools Used
Nginx
Claude Code
Curl
Docker
Gemini CLI
Git
GitHub Actions
GitHub Copilot
Related CVEs
CVE-2026-22218
CVE-2026-22219
CVE-2025-67685
CVE-2026-16498
CVE-2026-20230
CVE-2026-21945
CVE-2026-42271
CVE-2026-54272
MITRE Techniques
T1190 - Exploit Public-Facing Application
T1041 - Exfiltration Over C2 Channel
T1059 - Command and Scripting Interpreter
T1021 - Remote Services
T1071 - Application Layer Protocol
T1078 - Valid Accounts
T1195 - Supply Chain Compromise
T1567 - Exfiltration Over Web Service
Campaigns
CEH Compete Challenge
SolarWinds Compromise
SSRFurnace Web Exploit Simulation
Affected Platforms
Linux
Gitlab
GitHub
SQLAlchemy
Kubernetes
Java
Regions
China
Sectors Affected
Financial
Energy
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
2
IA
Initial Access
T1190 - Exploit Public-Facing Application
T1078 - Valid Accounts
1
EX
Execution
T1059 - Command and Scripting Interpreter
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
1
LM
Lateral Mov
T1021 - Remote Services
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
2
EX
Exfil
T1041 - Exfiltration Over C2 Channel
T1567 - Exfiltration Over Web Service
-
IM
Impact
No techniques detected
8
techniques detected across
5
tactics
Related Clusters (25)
Critical Security Flaws Found in SUSE Node.js Versions 22 and 24
Aug 6
·
2 sources
71
High-Risk SSRF Vulnerability in Privoce VoceChat Server Disclosed
Sep 28
·
1 sources
65
SSRF Vulnerability in Sentry MCP Server Exposes Security Risks
Aug 28
·
2 sources
65
CVE-2026-92602: TDuckCloud Survey Form Vulnerability Exposes User Data
Sep 17
·
1 sources
59
Critical SSRF Vulnerability in CordysCRM Exposed
Sep 25
·
1 sources
58
Cisco Finesse SSRF Vulnerability Disclosed
Oct 7
·
2 sources
58
SonicWall Patches SSRF Vulnerability in SMA1000 Appliances
Oct 14
·
1 sources
58
Multiple Vulnerabilities Found in Azuracast Before Version 0.23.8
Sep 27
·
0 sources
57
Monsta FTP Remote Code Execution Vulnerability CVE-2025-34299 Discovered
Nov 11
·
1 sources
55
Vulnerabilities Discovered in Forgejo Following Carrot Disclosure
Apr 30
·
2 sources
55
Critical Remote Code Execution Vulnerability in Monsta FTP Discovered
Nov 11
·
2 sources
53
SAML Protocol Criticized for Design Flaws Amidst Security Concerns
Sep 22
·
1 sources
40
Snyk VulnBench JS 1.0 Reveals Inconsistencies in LLM Security Findings
Jun 29
·
2 sources
40
Vulnerabilities in Chainlit AI Framework Risk Enterprise Cloud Security
Jan 21
·
6 sources
30
CISA Alerts on Exploited GitLab SSRF Vulnerability in Community and Enterprise Editions
Feb 4
·
2 sources
30
Kibana Vulnerabilities Enable SSRF and XSS Attacks
Nov 13
·
2 sources
30
FortiSandbox SSRF Vulnerability Disclosed, Affects Internal Traffic Proxying
Jan 14
·
2 sources
26
SSRF Vulnerability in Java TLS Handshakes Discovered by Tenable
Jan 21
·
1 sources
25
SSRFurnace Simulation Demonstrates Real-World Exploit Techniques
Dec 8
·
2 sources
24
Multiple High-Severity Vulnerabilities Discovered in API and Identity Services
Feb 4
·
3 sources
24
Advancements in Application Security Posture Management (ASPM)
Dec 12
·
4 sources
22
AI Agents Excel in Web Security CTF Challenges
Jan 30
·
2 sources
20
SSRF Vulnerability in Java TLS Handshakes Causes DoS Risk
Jan 20
·
1 sources
19
Kibana Vulnerabilities Enable SSRF and XSS Attacks
Nov 13
·
2 sources
13
DeepSeek-R1 AI Tool Generates Insecure Code with Political Prompts
Nov 20
·
2 sources
9
Prev
1 / 5
Next
Related Articles (33)
Sonicwall Cve 2026 102255 2026 10 07
cyberveille.esante.gouv.fr
·
Oct 14
Cisco Finesse Server
Sec.Cloudapps.Cisco
·
Oct 7
2026 08 06 Ssrf Vulnerability In Vocechat Server V0520
is.yuum.me
·
Sep 28
Azuracast Before 0.23.8 Ssrf And Local File Read Via Remote Playlist
www.vulncheck.com
·
Sep 27
GitHub Security Advisory GHSA-fg6q-pfj7-fghw
github.com
·
Sep 25
SAML: A Fractal of Bad Design
News.Ycombinator
·
Sep 22
Plugin4Shell Bypasses SHA Pinning Across All Four Major AI Coding Agents
Forkast.News
·
Sep 18
40
github.com
·
Sep 17
RamziRange10 exploit
Sploitus
·
Sep 14
Sentry MCP Server SSRF Exposes How Agent Trust Chains Become Attack Vectors
Cryptorank
·
Aug 28
SUSE Nodejs 24 Important Security Update for Multiple Issues 2026-3520
Linuxsecurity
·
Aug 6
CVE-2026-65924
nvd.nist.gov
·
Jul 30
Zimbra's November 2025 security release
wiki.zimbra.com
·
Jul 24
Snyk VulnBench JS 1.0: LLM Bug Repeatability
Snyk
·
Jun 29
Attackers exploit Cisco Unified CM flaw weeks after patch release
Csoonline
·
Jun 24
Carrot Disclosure: Forgejo
News.Ycombinator
·
Apr 28
Codex Security: now in research preview
Openai
·
Mar 6
Compromised npm package silently installs OpenClaw on developer machines
Csoonline
·
Feb 21
CISA Warns of GitLab Community and Enterprise Editions SSRF Vulnerability Exploited in Attacks
Cybersecuritynews
·
Feb 4
CISA Warns of Exploited GitLab Community and Enterprise SSRF Vulnerability
Gbhackers
·
Feb 4
cvss-8.5
Ctrlaltnod
·
Feb 4
AI Agents vs Humans: Who Wins at Web Hacking in 2026?
Wiz
·
Jan 29
Chainlit AI framework bugs let hackers breach cloud environments
Bleepingcomputer
·
Jan 21
Tenable Discovers SSRF Vulnerability in Java TLS Handshakes That Creates DoS Risk
Securityboulevard
·
Jan 21
Tenable Discovers SSRF Vulnerability in Java TLS Handshakes That Creates DoS Risk
Tenable
·
Jan 20
AI framework flaws put enterprise clouds at risk of takeover
Theregister
·
Jan 20
FortiSandbox SSRF Vulnerability Allows Attackers to Proxy Internal Traffic via Crafted HTTP ...
Cyberpress
·
Jan 14
ASPM in Action: 8 Real‑World Use Cases
Paloaltonetworks
·
Dec 12
SSRFurnace Web Exploit Simulation Powers November CEH Compete Challenge
Cbs42
·
Dec 8
CrowdStrike Finds Bias Triggers That Weaken DeepSeek
Esecurityplanet
·
Nov 20
Multiple Kibana Vulnerabilities Enables SSRF and XSS Attacks
Cybersecuritynews
·
Nov 13
Kibana Vulnerabilities Expose Systems to SSRF and XSS Attacks
Gbhackers
·
Nov 13
Monsta FTP: Critical Vulnerability Allows Attackers to Execute Malicious Code
Heise.De
·
Nov 10
Prev
1 / 7
Next
Related Entities
Data Breach
Zero-day Exploit
Server-Side Request Forgery
Sql Injection
Supply Chain Attack
DDoS
Authentication Bypass
Bypass Authentication
Code Injection
Command Injection
Denial of Service
Malware
