CWE-918

Server-Side Request Forgery (SSRF)

Parent: CWE-441 - Unintended Proxy or Intermediary ('Confused Deputy')

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

3,003 vulnerabilities with CWE-918
CVE-2026-55391 HIGH
datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
CVSS 7.5
CVE-2026-54691 HIGH
datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
CVSS 8.2
CVE-2026-54690 HIGH
datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
CVSS 8.2
CVE-2026-4912 MEDIUM
Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery
CVSS 4.1
CVE-2026-14869 HIGH
terraform-mcp-server vulnerable to server side request forgery leading to token exposure
CVSS 8.6
CVE-2026-59931 HIGH
PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist
CVSS 7.7
CVE-2026-54605 HIGH
OAuth: Cross-origin token-request redirects can expose signed request metadata
CVSS 7.2
CVE-2026-43910 HIGH
Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
CVSS 8.2
CVE-2026-67173 MEDIUM
Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests
CVE-2026-65442 HIGH
WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-61953 HIGH
WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-65925 MEDIUM
Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository
CVSS 6.5
CVE-2026-65924 MEDIUM
Server-Side Request Forgery (SSRF) via Terraform Remote repository
CVSS 6.5
CVE-2026-65923 MEDIUM
Potential server-side request forgery in Artifactory Ansible repository handling
CVSS 6.8
CVE-2026-65618 MEDIUM
Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability
CVSS 6.5
CVE-2026-64649 MEDIUM
Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
CVSS 6.5
CVE-2026-16481 HIGH
Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool
CVE-2026-64645 MEDIUM
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
CVSS 6.1
CVE-2026-54272 MEDIUM
ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
CVE-2026-48051 LOW
Papra: SSRF via HTTP redirect bypass in webhook delivery
CVSS 3.5
CVE-2026-17552 CRITICAL
Plack::App::Prerender < 0.3.0 - Server-Side Request Forgery
CVSS 9.1
CVE-2026-17192 HIGH
VeloCloud Orchestrator Missing Input Validation SSRF
CVSS 8.5
CVE-2026-66437 MEDIUM
WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.9
CVE-2026-65558 MEDIUM
WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
CVSS 5.4
CVE-2026-59552 HIGH
WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
Details
Vulnerabilities 3,003