Security Intel Hub 531— Search: `SSRF`×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

LibreChat SSRF Vulnerability Analysis (CVE-2025-66201)

github.com · 2025-12-05

## Critical Vulnerability Information ### Vulnerability Type - **Server-side Request Forgery (SSRF)** ### Affected Versions - **< 0.8.1-rc2** ### Fixed Version - **0.8.1-rc2** ### Vulnerability Descri…

PublicCMS V5 SSRF Vulnerability Analysis (CVE-2025-65836)

github.com · 2025-12-06

### Key Information Summary - **CVE ID**: CVE-2025-65836 - **Affected Software**: PublicCMS V5.202506.b - **Vulnerability Type**: SSRF (Server-Side Request Forgery) - **Affected Component**: `chat` in…

CVSS 4.7

xerrors Yuxi-Know SSRF Vulnerability Analysis (CVE-2025-14116)

vuldb.com · 2025-12-06

### Vulnerability Key Information - **CVE ID**: CVE-2025-14116 - **Vulnerability Type**: Server-Side Request Forgery (SSRF) - **CVSS Meta Temp Score**: 4.2 - **Current Exploit Price**: $0-$5k - **CTI …

CVSS 6.5

Teradek VidiU Pro SSRF Vulnerability Advisory (ZSL-2018-5461)

www.zeroscience.mk · 2025-12-29

### Teradek VidiU Pro 3.0.3 SSRF Vulnerability #### Title: Teradek VidiU Pro 3.0.3 SSRF Vulnerability #### Advisory ID: ZSL-2018-5461 #### Type: Local/Remote #### Impact: Exposure of System Informatio…

CVSS 6.5

Teradek VidiU Pro SSRF Vulnerability and PoC (EDB-44672)

www.exploit-db.com · 2025-12-29

### Key Information - **Vulnerability Name**: Teradek VidiU Pro 3.0.3 - Server-Side Request Forgery - **EDB-ID**: 44672 - **CVE**: N/A - **Author**: LIQUIDWORM - **Type**: WEBAPPS - **Platform**: HARD…

CVSS 6.3

SSRF Vulnerability in local-deep-research Download Service (CWE-918)

github.com · 2025-12-29

### Critical Vulnerability Information #### Vulnerability Title Server-Side Request Forgery (SSRF) in Download Service #### Vulnerability Severity - **Severity Rating**: Moderate - **CVSS v3 Score**: …

CVSS 4.7

Sonic Blogging Platform SSRF Vulnerability Analysis

vuldb.com · 2026-01-03

### Critical Vulnerability Information - **Vulnerability Type**: Server-Side Request Forgery (SSRF) - **Affected Product**: Sonic Blogging Platform (go-sonic/sonic 1.1.4) - **Vulnerability Description…

CVSS 6.3

EyouCMS 1.7.7 SSRF Vulnerability Advisory

vuldb.com · 2026-01-03

### Vulnerability Key Information **Title:** Eyoucms 1.7.7 SSRF Vulnerability **Description:** A Server-Side Request Forgery (SSRF) vulnerability was discovered in EyouCMS version 1.7.7 and earlier. T…

CVSS 5.4

Microsoft SharePoint SSRF Information Disclosure Vulnerability (CVE-2026-20958)

msrc.microsoft.com · 2026-01-20

### Microsoft SharePoint Information Disclosure Vulnerability - **CVE-ID:** CVE-2026-20958 - **Release Date:** Jan 13, 2026 - **Last Updated:** Jan 14, 2026 #### Severity and Impact - **Max Severity:*…

CVSS 6.5

Miniflux SSRF Vulnerability (CVE-2026-21885) Advisory

github.com · 2026-01-20

### Vulnerability Key Information - **Vulnerability Type**: SSRF (Server-Side Request Forgery) - **Affected Versions**: <= 2.2.15 - **Fixed Version**: 2.2.16 - **Vulnerability ID**: CVE-2026-21885 - *…

CVSS 6.3

Merchant Mall TMS SSRF Vulnerability Analysis and Reproduction

github.com · 2026-01-20

### Key Information #### Vulnerability Description - **System Name**: Merchant Mall - **System Version**: TMS - **Vulnerability Type**: SSRF (Server-Side Request Forgery) #### Vulnerability Reproducti…

CVSS 7.7

Aiven BigQuery Sink Connector Arbitrary File Read/SSRF Vulnerability (CVE-2026-23529)

github.com · 2026-01-20

## Critical Vulnerability Information ### Vulnerability Description - **Vulnerability Name**: Arbitrary File Read in Google BigQuery Sink connector - **CVE ID**: CVE-2026-23529 - **GHSA ID**: GHSA-3mg…

Nu Html Checker (vnu) CVE-2025-15104 SSRF Vulnerability Analysis

fluidattacks.com · 2026-01-20

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-15104 - **CVSS v4.0 Base Score**: 6.9 - **Vulnerability Name**: Nu Html Checker (validator.nu) - Bypass Restri…

CVE-2025-56589: SSRF and LFI Vulnerability in Apyrse HTML2PDF Module

www.stratascale.com · 2026-01-27

### Key Information #### Vulnerability Overview - **Vulnerability Name**: Apyrse module SSRF & LFI - **CVE ID**: CVE-2025-56589 - **Discovery Team**: Stratascale Cybersecurity Research Unit (CRU) - **…

CVSS 4.0

YetiShare v5.1.0 SSRF Vulnerability Leading to Local File Read

www.exploit-db.com · 2026-01-27

## Key Information - **EDB-ID**: 49534 - **CVE**: N/A - **Author**: NUMAN TÜRLE - **Type**: WEBAPPS - **Platform**: PHP - **Date**: 2021-02-08 - **Vulnerable App**: YetiShare File Hosting Script 5.1.0…

CVSS 8.1

Skipper ExternalName SSRF Leading to Internal Service Exposure (GHSA-mxxc-p822-2hx9)

github.com · 2026-01-27

## Key Information - **Vulnerability Name:** dataclient/kubernetes ExternalName SSRF Leading to Internal Service Exposure - **Publisher:** szeucs - **Vulnerability ID:** GHSA-mxxc-p822-2hx9 - **Releas…

CVSS 5.3

SSRF Vulnerability in sigstore/rekor (CVE-2026-24117)

github.com · 2026-01-27

## Server-Side Request Forgery (SSRF) via provided public key URL ### Affected Package - **Package**: github.com/sigstore/rekor (Go) - **Affected Versions**: <= 1.4.3 - **Patched Versions**: 1.5.0 ###…

CVSS 7.5

FOG Project Unauthenticated SSRF in getversion.php (CVE-2026-24138)

github.com · 2026-01-27

## Key Information ### Vulnerability Overview - **Vulnerability Type**: Unauthenticated SSRF (Server-Side Request Forgery) - **Affected Versions**: 1.5.10.1754, > working-1.6-beta.2269 - **CVE ID**: C…

CVSS 3.5

Backstage SSRF Vulnerability (CVE-2026-24048) in @backstage/backend-defaults

github.com · 2026-01-27

## Critical Vulnerability Information ### Vulnerability Overview - **Vulnerability Type**: SSRF (Server-Side Request Forgery) - **CVE ID**: CVE-2026-24048 - **Information Source**: GitHub Security Adv…

CVSS 3.5

FetchUrlReader Redirect Injection & SSRF Mitigation via Allow List

github.com · 2026-01-27

### Key Vulnerability Information #### 1. **Redirect Validation** - **Description**: - The code changes ensure that redirects are validated against the reading configuration. This is essential to prev…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 531— Search: SSRF×

Security Intel Hub 531— Search: `SSRF`×