CWE-918— Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.— MITRE CWE catalog

4,202 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-918page 47 of 85

CVE-2026-61749MEDIUMCVSS 6.5EG 6.5
2026-09-21
InvenTree is an Open Source Inventory Management System. Prior to 1.4.0, privileged staff users who can author report or label templates can cause WeasyPrint report rendering to retrieve attacker-selected resources through the HTTP and HTT…
CVE-2026-88403MEDIUMCVSS 6.5EG 6.5
2026-09-21
A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.
CVE-2026-1641MEDIUMCVSS 6.5EG 6.5
2026-09-19
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting…
CVE-2026-62282MEDIUMCVSS 6.5EG 6.5
2026-09-18
OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permissio…
CVE-2026-86862MEDIUMCVSS 6.5EG 6.5
2026-09-17
pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pg_restore and psql. libpq expands a database name containing an equals sign into a full connection…
CVE-2026-92795MEDIUMCVSS 6.5EG 6.5
2026-09-16
Coze Studio through 0.5.1 fails to restrict the server URL supplied when registering plugin tools, allowing authenticated users to make the backend fetch internal services. Attackers can construct plugin requests to access cloud metadata e…
CVE-2026-92789MEDIUMCVSS 6.5EG 6.5
2026-09-16
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoint…
CVE-2026-92775MEDIUMCVSS 6.5EG 6.5
2026-09-16
Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissions can inject img e…
CVE-2026-87116MEDIUMCVSS 6.5EG 6.5
2026-09-16
Tanium addressed a server-side request forgery vulnerability in Threat Response.
CVE-2026-92139MEDIUMCVSS 6.5EG 6.5
2026-09-16
Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbu…
CVE-2026-91750MEDIUMCVSS 6.5EG 6.5
2026-09-15
WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation b…
CVE-2026-12765MEDIUMCVSS 6.5EG 6.5
2026-09-14
IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating…
CVE-2026-12767MEDIUMCVSS 6.5EG 6.5
2026-09-14
IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating…
CVE-2026-73497MEDIUMCVSS 6.5EG 6.5
2026-09-14
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). From 0.17.0 until 0.22.0, validate_url_for_ssrf resolves the attacker-controlled X-Atlassian-Jira-Url and X-Atlassian-Confluence-Url heade…
CVE-2026-54054MEDIUMCVSS 6.5EG 6.5
2026-09-10
Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, `POST /api/files/url`, is vulnerable to Server-Side Request Forgery (SSRF). The HTTP downloader us…
CVE-2026-86082MEDIUMCVSS 6.5EG 6.5
2026-09-08
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor…
CVE-2026-69361MEDIUMCVSS 6.5EG 6.5
2026-09-08
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-76971MEDIUMCVSS 6.5EG 6.5
2026-09-08
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could b…
CVE-2026-17631MEDIUMCVSS 6.5EG 6.5
2026-09-04
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerability.
CVE-2026-19301MEDIUMCVSS 6.5EG 6.5
2026-09-04
IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-85692MEDIUMCVSS 6.5EG 6.5
2026-09-04
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The fun…
CVE-2026-85163MEDIUMCVSS 6.5EG 6.5
2026-09-03
AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG parser that allows authenticated uploaders to fetch arbitrary internal URLs. An attacker can supply an internal URL via the epg_link parameter …
CVE-2026-84377MEDIUMCVSS 6.5EG 6.5
2026-09-02
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and…
CVE-2025-15613MEDIUMCVSS 6.5EG 6.5
2026-09-01
Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service config…
CVE-2026-58301MEDIUMCVSS 6.5EG 6.5
2026-08-31
When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vul…
CVE-2026-59278MEDIUMCVSS 6.5EG 6.5
2026-08-27
JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configuration for all @KafkaListener consumers — an external Kafka producer …
CVE-2026-77085MEDIUMCVSS 6.5EG 6.5
2026-08-20
n8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG Agent tool. The tool sent requests to the user-supplied API URL using a raw HTTP client that did not route through n8n's centralized SSRF protecti…
CVE-2026-54688MEDIUMCVSS 6.5EG 6.5
2026-08-19
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, web_url_read passes a caller-supplied URL to the server-side fetch path while assertUrlAllowed…
CVE-2026-73560MEDIUMCVSS 6.5EG 6.5
2026-08-17
vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers_utils/processors/mimo_v2_omni.py passes attacker-controlled image and audio strings through _fetch_i…
CVE-2026-58639MEDIUMCVSS 6.5EG 6.5
2026-08-11
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62902MEDIUMCVSS 6.5EG 6.5
2026-08-11
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-72598MEDIUMCVSS 6.5EG 6.5
2026-08-11
A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to make the server issue HTTP requests to internal network addresses by registering a webhook URL pointing to an internal host. The w…
CVE-2026-72597MEDIUMCVSS 6.5EG 6.5
2026-08-11
A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches a…
CVE-2026-72560MEDIUMCVSS 6.5EG 6.5
2026-08-11
A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal …
CVE-2026-16637MEDIUMCVSS 6.5EG 6.5
2026-08-07
OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.
CVE-2026-7657MEDIUMCVSS 6.5EG 6.5
2026-08-05
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF) due to incomplete and ineffective SSRF protection enforcement.
CVE-2026-71244MEDIUMCVSS 6.5EG 6.5
2026-08-05
Paperless-ngx's MailAccountViewSet.test action, when called with an existing account's ID and a masked password field, reuses the stored password, account_type, refresh_token, and expiration from that existing account while allowing the ca…
CVE-2026-71208MEDIUMCVSS 6.5EG 6.5
2026-08-05
KubeSphere's cluster-controller reconciliation (pkg/utils/clusterclient/clusterclient.go, addCluster) processes every Cluster custom resource's connection configuration and immediately calls Discovery.ServerVersion against the CRD-specifie…
CVE-2026-52371MEDIUMCVSS 6.5EG 6.5
2026-07-31
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.
CVE-2026-15974MEDIUMCVSS 6.5EG 6.5
2026-07-30
SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.
CVE-2026-65924MEDIUMCVSS 6.5EG 6.5
2026-07-27
JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authenticated user - or, if anonymous access is enabled on the repository, an unauthenticated user - could ca…
CVE-2026-65925MEDIUMCVSS 6.5EG 6.5
2026-07-27
A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response.
CVE-2026-65618MEDIUMCVSS 6.5EG 6.5
2026-07-27
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data.
CVE-2026-64649MEDIUMCVSS 6.5EG 6.5
2026-07-22
Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbo…
CVE-2026-13192MEDIUMCVSS 6.5EG 6.5
2026-07-22
In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in…
CVE-2026-58442MEDIUMCVSS 6.5EG 6.5
2026-07-21
Repository migration SSRF via multi-answer DNS allow-list bypass
CVE-2026-15746MEDIUMCVSS 6.5EG 6.5
2026-07-15
Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the elasticsearch_memory tool for agent memory storage. We identified…
CVE-2026-54562MEDIUMCVSS 6.5EG 6.5
2026-07-15
Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download and passes them to the configured downloader without blocking…
CVE-2026-55051MEDIUMCVSS 6.5EG 6.5
2026-07-14
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-58478MEDIUMCVSS 6.5EG 6.5
2026-07-14
Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated attackers to make the device issue arbitrary HTTP requests by supplying a malicious callba…

Map vulnerabilities like CWE-918 to your infrastructure

EchelonGraph correlates every CVE — across CWE-918 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →