CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
3,006 vulnerabilities with CWE-918
CVE-2026-44016
HIGH
Docling: Unsafe Playwright-based HTML Rendering
CVSS 8.2
CVE-2026-12986
HIGH
Payara Server - Cross-Site Request Forgery (CSRF)
CVE-2026-57303
HIGH
Jenkins Assembla Plugin < 1.4 - Server-Side Request Forgery (SSRF)
CVSS 7.1
CVE-2026-13150
MEDIUM
SSRF in Pentestify PDF generation endpoint via Host header
CVE-2026-12100
HIGH
URL Preview <= 1.0 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
CVSS 7.2
CVE-2026-12095
HIGH
Kargo Takip <= 1.2 - Unauthenticated Server-Side Request Forgery via 'api_url' Parameter
CVSS 7.2
CVE-2026-11370
MEDIUM
WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
CVSS 6.4
CVE-2026-54514
MEDIUM
jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)
CVSS 5.3
CVE-2026-53931
MEDIUM
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
CVE-2026-53930
MEDIUM
NocoDB: Server-Side Request Forgery via Base Migration URL
CVE-2026-53927
MEDIUM
NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL
CVE-2026-47382
MEDIUM
NocoDB: Server-Side Request Forgery via Database Connection Host
CVE-2026-46548
MEDIUM
NocoDB: SSRF Protection Bypass in Notification Webhook Plugins (Slack, Discord, Mattermost, Teams)
CVSS 4.3
CVE-2026-53755
HIGH
Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
CVSS 8.6
CVE-2026-53754
HIGH
Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
CVSS 7.5
CVE-2026-54157
CRITICAL
LobeHub: Unauthenticated SSRF in `/webapi/proxy`
CVSS 9.0
CVE-2026-54018
HIGH
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
CVSS 7.7
CVE-2026-54008
HIGH
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url`
CVSS 8.5
CVE-2026-50221
MEDIUM
Openstack Swift - Server-Side Request Forgery (SSRF)
CVSS 5.4
CVE-2026-49860
MEDIUM
Deno: WebSocket API sandbox bypass via missing post-DNS check
CVSS 5.2
CVE-2026-49859
MEDIUM
Deno: `fetch()` API sandbox bypass via missing DNS resolution check
CVSS 5.2
CVE-2026-56275
HIGH
Flowise - Server-Side Request Forgery via Execute Flow Base URL
CVSS 7.1
CVE-2026-56348
CRITICAL
n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint
CVSS 9.1
CVE-2026-56266
HIGH
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
CVSS 8.6
CVE-2026-55599
MEDIUM
phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access
CVSS 5.8
Details
Vulnerabilities
3,006