CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
3,003 vulnerabilities with CWE-918
CVE-2026-55391
HIGH
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
CVSS 7.5
CVE-2026-54691
HIGH
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
CVSS 8.2
CVE-2026-54690
HIGH
datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
CVSS 8.2
CVE-2026-4912
MEDIUM
Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery
CVSS 4.1
CVE-2026-14869
HIGH
terraform-mcp-server vulnerable to server side request forgery leading to token exposure
CVSS 8.6
CVE-2026-59931
HIGH
PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
CVSS 7.7
CVE-2026-54605
HIGH
OAuth: Cross-origin token-request redirects can expose signed request metadata
CVSS 7.2
CVE-2026-43910
HIGH
Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
CVSS 8.2
CVE-2026-67173
MEDIUM
Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests
CVE-2026-65442
HIGH
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-61953
HIGH
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-65925
MEDIUM
Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository
CVSS 6.5
CVE-2026-65924
MEDIUM
Server-Side Request Forgery (SSRF) via Terraform Remote repository
CVSS 6.5
CVE-2026-65923
MEDIUM
Potential server-side request forgery in Artifactory Ansible repository handling
CVSS 6.8
CVE-2026-65618
MEDIUM
Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability
CVSS 6.5
CVE-2026-64649
MEDIUM
Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
CVSS 6.5
CVE-2026-16481
HIGH
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
CVE-2026-64645
MEDIUM
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
CVSS 6.1
CVE-2026-54272
MEDIUM
ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
CVE-2026-48051
LOW
Papra: SSRF via HTTP redirect bypass in webhook delivery
CVSS 3.5
CVE-2026-17552
CRITICAL
Plack::App::Prerender < 0.3.0 - Server-Side Request Forgery
CVSS 9.1
CVE-2026-17192
HIGH
VeloCloud Orchestrator Missing Input Validation SSRF
CVSS 8.5
CVE-2026-66437
MEDIUM
WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.9
CVE-2026-65558
MEDIUM
WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
CVSS 5.4
CVE-2026-59552
HIGH
WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
Details
Vulnerabilities
3,003