Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:918"
685 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57106 |
critical | 10.0 | 0.0090 | 2026-07-24 | Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privil | |
CVE-2026-69502 |
critical | 10.0 | 0.0080 | 2026-08-21 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate | |
CVE-2026-65801 |
critical | 10.0 | 0.0090 | 2026-08-20 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to e | |
CVE-2026-32871 |
critical | 10.0 | 0.0091 | 2026-04-02 | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvi | |
CVE-2026-40114 |
critical | 10.0 | 0.0024 | 2026-04-09 | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /api/v1/runs endpoint accepts an arbi | |
CVE-2026-26150 |
critical | 10.0 | 0.0057 | 2026-04-23 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate p | |
CVE-2026-35431 |
critical | 10.0 | 0.0051 | 2026-04-23 | Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthoriz | |
CVE-2026-2053 |
critical | 10.0 | 0.0039 | 2026-06-26 | The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not suffi | |
CVE-2026-49869 |
critical | 10.0 | 0.0209 | 2026-06-26 | KEV | Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote |
CVE-2026-13773 |
critical | 10.0 | 0.0610 | 2026-06-30 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in | |
CVE-2026-57211 |
critical | 10.0 | 0.0063 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ man | |
CVE-2026-62643 |
critical | 10.0 | 0.0025 | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) | |
CVE-2026-15409 |
critical | 10.0 | 0.0679 | 2026-07-14 | KEV | SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a |
CVE-2026-54735 |
critical | 10.0 | 0.0061 | 2026-07-29 | Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Pr | |
CVE-2026-48331 |
critical | 10.0 | 0.0095 | 2026-08-03 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that | |
CVE-2026-45499 |
critical | 9.9 | 0.0078 | 2026-07-02 | Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileg | |
CVE-2026-57100 |
critical | 9.9 | 0.0078 | 2026-07-02 | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an au | |
CVE-2026-69851 |
critical | 9.9 | 0.0078 | 2026-08-20 | Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevat | |
CVE-2026-40089 |
critical | 9.9 | 0.0023 | 2026-04-09 | Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audi | |
CVE-2026-42858 |
critical | 9.9 | 0.0037 | 2026-05-11 | Open edX Platform enables the authoring and delivery of online learning at any scale. The sync_provi | |
CVE-2026-42864 |
critical | 9.9 | 0.0027 | 2026-05-11 | FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/rai | |
CVE-2026-44015 |
critical | 9.9 | 0.0032 | 2026-05-12 | Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated us | |
CVE-2026-55115 |
critical | 9.9 | 0.0047 | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit a Server-Side Request | |
CVE-2025-56563 |
critical | 9.8 | 0.0058 | 2026-09-16 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. | |
CVE-2026-5936 |
critical | 9.8 | 0.0019 | 2026-04-13 | An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to | |
CVE-2026-11546 |
critical | 9.8 | 0.0040 | 2026-06-30 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side re | |
CVE-2026-11714 |
critical | 9.8 | 0.0037 | 2026-06-30 | IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability | |
CVE-2026-64873 |
critical | 9.8 | 0.0048 | 2026-07-23 | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could a | |
CVE-2026-17617 |
critical | 9.8 | 0.0034 | 2026-08-05 | IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SS | |
CVE-2026-34884 |
critical | 9.8 | 0.0069 | 2026-08-18 | SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking | |
CVE-2026-46651 |
critical | 9.8 | 0.0038 | 2026-10-23 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browse | |
CVE-2026-69435 |
critical | 9.6 | 0.0056 | 2026-10-08 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a | |
CVE-2026-13751 |
critical | 9.6 | 0.0020 | 2026-06-29 | Improper handling of untrusted remote references in Snowflake CLI versions prior to 3.19 allowed ser | |
CVE-2026-22874 |
critical | 9.6 | 0.0046 | 2026-07-03 | Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration a | |
CVE-2026-54725 |
critical | 9.6 | 0.0045 | 2026-07-31 | vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods | |
CVE-2026-12605 |
critical | 9.6 | 0.0043 | 2026-08-06 | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leak | |
CVE-2026-12564 |
critical | 9.6 | 0.0035 | 2026-08-18 | A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() fu | |
CVE-2026-62668 |
critical | 9.4 | 0.0045 | 2026-08-19 | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's cont | |
CVE-2026-15378 |
critical | 9.3 | 0.0053 | 2026-07-10 | A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacke | |
CVE-2026-15143 |
critical | 9.3 | 0.0054 | 2026-07-10 | A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allow | |
CVE-2026-67426 |
critical | 9.3 | 0.0037 | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the stand | |
CVE-2026-64849 |
critical | 9.3 | 0.1002 | 2026-08-17 | KEV | MLflow contains a server-side request forgery vulnerability that can allow attackers to reach intern |
CVE-2026-66794 |
critical | 9.3 | 0.0062 | 2026-08-19 | A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine for Kubernetes. This | |
CVE-2026-75885 |
critical | 9.3 | 0.0073 | 2026-09-18 | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/d | |
CVE-2026-42281 |
critical | 9.2 | 0.0162 | 2026-05-14 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Se | |
CVE-2026-56266 |
critical | 9.2 | 0.0048 | 2026-06-22 | Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/str | |
CVE-2026-59707 |
critical | 9.2 | 0.0138 | 2026-07-07 | LocalAI contains an unauthenticated server-side request forgery vulnerability in the POST /models/ap | |
CVE-2026-59702 |
critical | 9.2 | 0.0041 | 2026-07-08 | repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that all | |
CVE-2026-56261 |
critical | 9.2 | 0.0051 | 2026-07-10 | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API | |
CVE-2026-15183 |
critical | 9.2 | 0.0031 | 2026-07-14 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) version |