CWE-918

Server-Side Request Forgery (SSRF)

Parent: CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

3,006 vulnerabilities with CWE-918
CVE-2026-55113 HIGH
Ubiquiti INC UniFi Talk Application < 5.2.2 - Server-Side Request Forgery (SSRF)
CVSS 7.5
CVE-2026-54401 HIGH
Ubiquiti INC UniFi OS Server - Server-Side Request Forgery (SSRF)
CVSS 7.7
CVE-2026-57681 MEDIUM
WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability
CVSS 6.4
CVE-2026-57348 HIGH
WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-54430 MEDIUM
Server-Site Request Forgery in liboauth2
CVE-2026-14336 HIGH
Eclipse Csi - Pia < 0.3.0 - Server-Side Request Forgery (SSRF)
CVSS 8.2
CVE-2026-55791 MEDIUM
Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs
CVE-2026-24242 HIGH
Nvidia Megatron-Bridge - Server-Side Request Forgery (SSRF)
CVSS 7.8
CVE-2026-13603 CRITICAL
SSRF with API key leak in pretix-oppwa
CVE-2026-56399 MEDIUM
Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web
CVSS 5.0
CVE-2026-13773 MEDIUM
IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol
CVSS 6.0
CVE-2026-11714 HIGH
IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability
CVSS 8.5
CVE-2026-11546 HIGH
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability
CVSS 7.1
CVE-2026-10564 HIGH
IBM Langflow OSS 1.0.0-1.9.6 - Server-Side Request Forgery in Legacy Components
CVSS 8.2
CVE-2026-10546 HIGH
DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component
CVSS 7.1
CVE-2026-10129 HIGH
SSRF via HTTP Redirect Following in Langflow API Request Component
CVSS 8.5
CVE-2026-48285 HIGH
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVSS 8.6
CVE-2026-13316 MEDIUM
Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
CVSS 4.4
CVE-2026-57947 HIGH
Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration
CVSS 8.5
CVE-2026-56285 HIGH
Nitter - Server-Side Request Forgery in /video Media Proxy Endpoint
CVSS 8.6
CVE-2026-13751 MEDIUM
Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load
CVSS 4.1
CVE-2026-13540 MEDIUM
GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery
CVSS 6.3
CVE-2026-49869 CRITICAL
Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
CVSS 10.0
CVE-2026-54353 HIGH
Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation
CVSS 8.5
CVE-2026-56663 HIGH
AutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` access
CVSS 8.5
Details
Vulnerabilities 3,006
Links
MITRE CWE Entry Search this CWE With Exploits