CWE-918— Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.— MITRE CWE catalog

3,602 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-918page 71 of 73

CVE-2026-85675HIGHCVSS 7.5EG 7.5
2026-09-04
OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through …
CVE-2026-85686HIGHCVSS 7.5EG 7.5
2026-09-04
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image…
CVE-2026-85691HIGHCVSS 7.5EG 7.5
2026-09-04
MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side. Attackers can supply internal service URLs or metadata endpoints without aut…
CVE-2026-85692MEDIUMCVSS 6.5EG 6.5
2026-09-04
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The fun…
CVE-2026-85699HIGHCVSS 7.5EG 7.5
2026-09-04
jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal n…
CVE-2026-85732MEDIUMCVSS 4.7EG 4.7
2026-09-16
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Ta…
CVE-2026-85917HIGHCVSS 7.5EG 7.5
2026-09-17
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-8606MEDIUMCVSS 5.9EG 5.9
2026-05-26
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP requests to internal services via the security advisories package lookup feature. By d…
CVE-2026-86074HIGHCVSS 7.1EG 7.1
2026-09-08
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-cont…
CVE-2026-86082MEDIUMCVSS 6.5EG 6.5
2026-09-08
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor…
CVE-2026-86100MEDIUMCVSS 6.4EG 6.4
2026-09-04
Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal netw…
CVE-2026-86119HIGHCVSS 8.6EG 8.6
2026-09-05
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URL…
CVE-2026-86122MEDIUMCVSS 5.0EG 5.0
2026-09-05
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform serve…
CVE-2026-86123HIGHCVSS 8.7EG 8.7
2026-09-05
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL co…
CVE-2026-86173HIGHCVSS 7.5EG 7.5
2026-09-05
MindsDB through 26.1.0 contains a server-side request forgery vulnerability in the web crawler handler that allows unauthenticated attackers to fetch arbitrary URLs by supplying caller-controlled URLs to CrawlerTable.list. Attackers can by…
CVE-2026-86237MEDIUMCVSS 5.3EG 5.3
2026-09-07
A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. Impacted is the function test_default_model of the file sdk/src/openagents/sdk/transports/http.py. Performing a manipulation of the argument base_url results…
CVE-2026-86240MEDIUMCVSS 4.7EG 4.7
2026-09-07
A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source[] results in server…
CVE-2026-86259HIGHCVSS 7.5EG 7.5
2026-09-06
OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url head…
CVE-2026-86273HIGHCVSS 7.3EG 7.3
2026-09-07
A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF En…
CVE-2026-86321MEDIUMCVSS 5.3EG 5.3
2026-09-07
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jackson/JsonLoader.java of the component URL Validation. The manipulatio…
CVE-2026-86419CRITICALCVSS 9.1EG 9.1
2026-09-07
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. In feed processing, redirects were followed without validating the redirect scheme o…
CVE-2026-86503LOWCVSS 3.3EG 3.3
2026-09-07
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
CVE-2026-86539HIGHCVSS 7.2EG 7.2
2026-09-07
knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal h…
CVE-2026-86590MEDIUMCVSS 6.3EG 6.3
2026-09-08
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can expl…
CVE-2026-8661MEDIUMCVSS 4.8EG 4.8
2026-06-26
Server-Side Request Forgery in the markdown_to_pdf action of Rapid7 InsightConnect Markdown Plugin on Linux in versions prior to 4.0.2 allows remote attackers to make arbitrary outbound HTTP requests via unsanitized resource-loading HTML e…
CVE-2026-86735MEDIUMCVSS 5.0EG 5.0
2026-09-08
snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can c…
CVE-2026-86771HIGHCVSS 7.6EG 7.6
2026-09-09
Snipe-IT versions before 8.7.0 fail to HTML-escape the employee_num field in the acceptance PDF generator, allowing attackers with users.edit permission to inject img tags into TCPDF's writeHTML() function. Attackers can craft a malicious …
CVE-2026-86806HIGHCVSS 7.3EG 7.3
2026-09-08
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function _is_within_roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommend…
CVE-2026-86862MEDIUMCVSS 6.5EG 6.5
2026-09-17
pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pg_restore and psql. libpq expands a database name containing an equals sign into a full connection…
CVE-2026-87084HIGHCVSS 7.7EG 7.7
2026-09-09
Tanium addressed a server-side request forgery vulnerability in Enforce.
CVE-2026-87116MEDIUMCVSS 6.5EG 6.5
2026-09-16
Tanium addressed a server-side request forgery vulnerability in Threat Response.
CVE-2026-8712HIGHCVSS 8.3EG 8.3
2026-09-01
Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the H…
CVE-2026-8725HIGHCVSS 7.3EG 7.3
2026-05-17
A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation causes server-side request forgery. Remote …
CVE-2026-87595CRITICALCVSS 9.8EG 9.8
2026-09-09
Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-8768HIGHCVSS 7.3EG 7.3
2026-05-17
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side…
CVE-2026-87821HIGHCVSS 7.1EG 7.1
2026-09-09
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated user to fetch arbitrary URLs and read the response body. Attackers can r…
CVE-2026-87996HIGHCVSS 7.7EG 7.7
2026-09-09
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/open_webui/retrieval/web/utils.py validated a user-controlled hostname in Python and then let…
CVE-2026-87999HIGHCVSS 7.1EG 7.1
2026-09-09
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open_webui/retrieval/web/utils.py treated Py…
CVE-2026-88001MEDIUMCVSS 5.0EG 5.0
2026-09-09
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEB_FETCH_FILTER_LIST or private-address controls to HTTP redirect destinations when AIO…
CVE-2026-88056HIGHCVSS 8.6EG 8.6
2026-09-10
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular Server-Side Rendering in @angular/platform-server processes …
CVE-2026-88892MEDIUMCVSS 5.0EG 5.0
2026-09-10
OpenPanel is an analytics platform. In all versions (no patched release available at time of publication), the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard (apps/api/src/utils/sa…
CVE-2026-88896MEDIUMCVSS 5.3EG 5.3
2026-09-10
EspoCRM before 10.0.4 is vulnerable to server-side request forgery. HostCheck::ipAddressIsNotInternal(), which validates outbound URLs to block requests to internal/private IP addresses, strips ::ffff: (IPv4-mapped IPv6) prefixes but does …
CVE-2026-89049CRITICALCVSS 9.9EG 9.9
2026-09-10
A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms mi…
CVE-2026-89242HIGHCVSS 7.2EG 7.2
2026-09-11
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a server-side request forgery vulnerability in the _json_decode function that fetches remote URLs and local file paths without SSRF validation. Unauthenticated at…
CVE-2026-9006CRITICALCVSS 9.1EG 9.1
2026-06-22
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or i…
CVE-2026-90446MEDIUMCVSS 5.3EG 5.3
2026-09-11
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an…
CVE-2026-90486MEDIUMCVSS 6.3EG 6.3
2026-09-12
A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.t…
CVE-2026-90580MEDIUMCVSS 6.3EG 6.3
2026-09-13
A vulnerability was found in FlowiseAI Flowise up to 3.0.2. This vulnerability affects the function axios.post of the file packages/server/src/controllers/evaluations/index.ts of the component Evaluations Endpoint. The manipulation of the …
CVE-2026-90710HIGHCVSS 7.3EG 7.3
2026-09-14
A vulnerability was determined in taisan tarzan-cms 1.0.0. This issue affects the function openConnection of the file com/tarzan/cms/modules/admin/service/biz/ThemeService.java of the component Theme Download Function. Executing a manipula…
CVE-2026-90769HIGHCVSS 7.7EG 7.7
2026-09-13
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, i…

Map vulnerabilities like CWE-918 to your infrastructure

EchelonGraph correlates every CVE — across CWE-918 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →