CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
3,003 vulnerabilities with CWE-918
CVE-2026-17534
MEDIUM
Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects
CVSS 5.5
CVE-2026-17458
MEDIUM
mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery
CVSS 6.3
CVE-2026-57106
CRITICAL
Microsoft Purview Data Governance - Data Quality Elevation of Privilege Vulnerability
CVSS 10.0
CVE-2026-16910
MEDIUM
Quay: ssrf in red hat quay notification webhooks (slack/generic)
CVSS 5.5
CVE-2026-16870
HIGH
Multiple Security Vulnerabilities in Snowflake libsnowflakeclient
CVSS 8.8
CVE-2026-56167
HIGH
Azure AI Search Elevation of Privilege Vulnerability
CVSS 8.5
CVE-2026-63313
HIGH
9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch
CVSS 7.7
CVE-2026-21653
HIGH
CCure and Victor Application Server - Server Side Request Forgery
CVE-2026-48013
MEDIUM
Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation
CVSS 4.1
CVE-2026-65516
HIGH
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
CVSS 7.2
CVE-2026-65496
MEDIUM
WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.4
CVE-2026-65467
MEDIUM
WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.9
CVE-2026-65466
MEDIUM
WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.9
CVE-2026-24639
MEDIUM
WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability
CVSS 4.4
CVE-2026-64873
CRITICAL
Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension
CVSS 9.8
CVE-2026-64799
HIGH
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions
CVSS 7.5
CVE-2026-13192
MEDIUM
RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
CVSS 6.5
CVE-2026-65593
MEDIUM
n8n before 1.123.64 SSRF via Dynamic Node Parameters
CVSS 5.4
CVE-2026-65318
HIGH
Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
CVSS 8.6
CVE-2026-65317
HIGH
Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
CVSS 8.6
CVE-2026-65057
CRITICAL
Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck
CVSS 9.3
CVE-2026-65056
HIGH
mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering
CVSS 8.2
CVE-2026-63764
HIGH
lmdeploy Server-Side Request Forgery via HTTP Redirect Bypass of Private-IP Guard in Vision Image Fetch
CVSS 8.6
CVE-2026-47695
HIGH
CC-Tweaked has an SSRF Protection Bypass with NAT64
CVE-2026-46556
MEDIUM
FlaskBB: SSRF in get_image_info() via unrestricted avatar URL
CVSS 6.5
Details
Vulnerabilities
3,003