Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:918"
679 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57573 |
high | 8.6 | 0.0044 | 2026-07-06 | Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API serv | |
CVE-2026-44023 |
high | 8.6 | 0.0043 | 2026-07-16 | Docling Core defines core data types and transformations for the document processing application Doc | |
CVE-2026-14869 |
high | 8.6 | 0.0039 | 2026-07-28 | The terraform-mcp-server before version 1.1.0 is vulnerable to a server-side request forgery issue i | |
CVE-2026-16328 |
high | 8.6 | 0.0039 | 2026-07-29 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not restrict how the Consul backend address was | |
CVE-2026-71270 |
high | 8.6 | 0.0043 | 2026-08-05 | Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with | |
CVE-2026-47664 |
high | 8.6 | 0.0021 | 2026-08-07 | Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health da | |
CVE-2026-72581 |
high | 8.6 | 0.0050 | 2026-08-10 | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allo | |
CVE-2026-73247 |
high | 8.6 | 0.0041 | 2026-08-11 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/mai | |
CVE-2026-56677 |
high | 8.6 | 0.0037 | 2026-08-17 | 9Router is an AI router & token saver. In 0.5.4 and earlier, the POST /api/auth/oidc/test endpoint i | |
CVE-2026-100750 |
high | 8.5 | 0.0019 | 2026-09-28 | Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modul | |
CVE-2026-69543 |
high | 8.5 | 0.0056 | 2026-08-20 | Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevat | |
CVE-2026-56167 |
high | 8.5 | 0.0055 | 2026-07-23 | Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privi | |
CVE-2026-31943 |
high | 8.5 | 0.0022 | 2026-03-27 | LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in `p | |
CVE-2026-33953 |
high | 8.5 | 0.0028 | 2026-03-27 | LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requ | |
CVE-2026-39974 |
high | 8.5 | 0.0032 | 2026-04-09 | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive acce | |
CVE-2026-42449 |
high | 8.5 | 0.0021 | 2026-05-07 | n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, a | |
CVE-2026-42860 |
high | 8.5 | 0.0030 | 2026-05-11 | The Open edx Enterprise Service app provides enterprise features to the Open edX platform. From 7.0. | |
CVE-2026-56663 |
high | 8.5 | 0.0028 | 2026-06-26 | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificia | |
CVE-2026-10129 |
high | 8.5 | 0.0031 | 2026-06-30 | IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass | |
CVE-2026-10055 |
high | 8.5 | 0.0040 | 2026-07-03 | In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker | |
CVE-2026-67424 |
high | 8.5 | 0.0029 | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP | |
CVE-2026-67428 |
high | 8.5 | 0.0041 | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emit | |
CVE-2026-71271 |
high | 8.5 | 0.0033 | 2026-08-05 | Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP ag | |
CVE-2026-71280 |
high | 8.5 | 0.0030 | 2026-08-05 | go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL usin | |
CVE-2026-9203 |
high | 8.5 | 0.0034 | 2026-08-05 | A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 al | |
CVE-2026-18597 |
high | 8.5 | 0.0031 | 2026-08-06 | The PDF creation feature of Foxit PDF Services API supports referencing external files. Although loc | |
CVE-2026-18359 |
high | 8.5 | 0.0035 | 2026-08-06 | Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through | |
CVE-2026-51583 |
high | 8.5 | 0.0040 | 2026-08-11 | An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side R | |
CVE-2026-68558 |
high | 8.5 | 0.0039 | 2026-08-19 | Wekan is open source kanban built with Meteor. From 8.36 until 9.74, the outgoing webhook Integratio | |
CVE-2026-65818 |
high | 8.5 | 0.0063 | 2026-09-03 | Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privil | |
CVE-2026-61429 |
high | 8.4 | 0.0027 | 2026-07-11 | PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI | |
CVE-2026-61430 |
high | 8.4 | 0.0025 | 2026-07-15 | PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool t | |
CVE-2026-62234 |
high | 8.4 | 0.0037 | 2026-07-17 | Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users | |
CVE-2026-73629 |
high | 8.4 | 0.0032 | 2026-08-13 | Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url | |
CVE-2026-75898 |
high | 8.4 | 0.0039 | 2026-08-18 | RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "In | |
CVE-2025-14260 |
high | 8.3 | — | 2026-10-28 | Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied i | |
CVE-2026-34428 |
high | 8.3 | 0.0026 | 2026-04-20 | Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy actio | |
CVE-2026-41270 |
high | 8.3 | 0.0023 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-41271 |
high | 8.3 | 0.0023 | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3. | |
CVE-2026-12473 |
high | 8.3 | 0.0039 | 2026-06-25 | Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitra | |
CVE-2026-44937 |
high | 8.3 | 0.0042 | 2026-07-06 | Potential forgery of webhook requests when using a unauthenticated webhook in SUSE Rancher Fleet 0.1 | |
CVE-2026-62143 |
high | 8.3 | 0.0040 | 2026-07-13 | A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion mod | |
CVE-2026-62240 |
high | 8.3 | 0.0052 | 2026-07-13 | CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url functi | |
CVE-2026-65056 |
high | 8.3 | 0.0029 | 2026-07-21 | mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to | |
CVE-2026-63313 |
high | 8.3 | 0.0041 | 2026-07-23 | 9Router before 0.4.72 contains a server-side request forgery (SSRF) vulnerability in the /v1/web/fet | |
CVE-2026-64645 |
high | 8.3 | 0.0041 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15 | |
CVE-2026-64649 |
high | 8.3 | 0.0046 | 2026-07-27 | Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15 | |
CVE-2026-67436 |
high | 8.3 | 0.0042 | 2026-07-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related mo | |
CVE-2026-116192 |
high | 8.2 | 0.0022 | 2026-10-25 | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unau | |
CVE-2026-116826 |
high | 8.2 | 0.0024 | 2026-10-27 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::dow |