Security Intel Hub 616— Search: `SSRF`×

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

CVSS 7.3

JEEWMS v3.7 UEditor SSRF Vulnerability in getRemoteImage.jsp

www.notion.so · 2026-02-24

Thinking Process: 1. **Analyze the Request:** * **Task:** Translate a Chinese vulnerability intelligence summary to English. * **Role:** Professional translator specializing in cybersecurity. * **Inpu…

CVE-2026-25545: SSRF in @astrojs/node via Host Header Injection with PoC

github.com · 2026-02-24

CVSS 6.3

DataLinkDC dinky SSRF Vulnerability Analysis (CVE-2026-3052)

vuldb.com · 2026-02-24

CVSS 6.3

Dinky FlinkProxyController SSRF Vulnerability Analysis

github.com · 2026-02-24

CVSS 6.3

Dinky FlinkProxyController SSRF Vulnerability Analysis

github.com · 2026-02-24

## Vulnerability Key Information ### 1. Vulnerability Type - **Server-Side Request Forgery (SSRF)** ### 2. Affected Environment - **Project**: Dinky - **Repository**: [https://github.com/DataLinkDC/di…

Craft CMS SSRF Fix via IPv6 Prefix Filtering (GHSA-v2gc-rm6g-wrw9)

github.com · 2026-02-24

Thinking Process: 1. **Analyze the Request:** * **Task:** Translate a Chinese vulnerability intelligence summary into English. * **Role:** Professional translator specializing in cybersecurity. * **Co…

CVE-2026-27732: Authenticated SSRF in AVideo <22

github.com · 2026-02-25

### Key Vulnerability Information - **Vulnerability ID:** GHSA-h39h-7cvg-q7j6 - **CVE ID:** CVE-2026-27732 - **Vulnerability Type:** Authenticated Server-Side Request Forgery (SSRF) — CWE-918 - **Affe…

CVSS 8.6

changetection.io SSRF Vulnerability (CVE-2026-27696) Advisory

github.com · 2026-02-25

### Key Information - **Vulnerability Type**: Server-Side Request Forgery (SSRF) via Watch URLs - **Severity**: High (8.6/10) - **CVE ID**: CVE-2026-27696 - **Affected Versions**: `. ### Exploitation …

CVSS 7.7

GHSA-jcc6-f9v6-f7jw: Authenticated Full Read SSRF via Favicon Fetching (CVE-2026-27706)

github.com · 2026-02-26

### Key Information #### Vulnerability Details - **Title**: Full Read SSRF via Favicon Fetching in "Add Link" Feature - **ID**: GHSA-jcc6-f9v6-f7jw - **Publisher**: sriramveeraghanta - **Published**: …

CVSS 3.1

sz-boot-parent <= v1.3.2-beta SSRF and Arbitrary File Read Vulnerability

vuldb.com · 2026-02-26

### Key Information Summary #### Title - **Title**: feiyuchuixue https://github.com/feiyuchuixue/sz-boot-parent sz-boot-parent <= v1.3.2-beta Arbitrary_File_Read/SSRF #### Description - **Description*…

SSRF Vulnerability Principles and Defense Checklist

developer.mozilla.org · 2026-02-26

### Key Information on SSRF Vulnerabilities - **Definition**: - Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to force a server to make arbitrary network requests. Sinc…

OpenKruise CVE-2026-24005 SSRF via Unrestricted Host Field

github.com · 2026-02-26

### Vulnerability Key Information - **CVE ID**: CVE-2026-24005 - **Vulnerability Type**: SSRF (Server-Side Request Forgery) via Unrestricted Host Field - **Affected Versions**: <v1.8.0 - **Fixed Versi…

CVSS 6.3

SSRF Vulnerability in Psi Probe <=5.3.0 via Whois Lookup

github.com · 2026-02-27

### Server-Side Request Forgery (SSRF) in Psi Probe #### Affected Environment - **Project**: Psi Probe - **Repository**: https://github.com/psi-probe/psi-probe - **Affected Version**: (via WhoisContro…

CVSS 8.2

Gradio SSRF via Malicious proxy_url Injection in gr.load() (CVE-2026-28416)

github.com · 2026-02-28

### Vulnerability Information - **Vulnerability Name**: SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing - **Severity**: High - **CVE ID**: CVE-2026-28416 - **Affected Version…

CVSS 5.0

Jeesite XXE Vulnerability (CWE-611): Unfiltered logoutRequest Causes SSRF

www.yuque.com · 2026-03-02

## Jeesite XXE Vulnerability Report (CWE-611) ### 1. Description Jeesite contains an XXE vulnerability. The user-controlled `logoutRequest` XML is parsed without adequate XXE protections, enabling att…

CVSS 9.8

Sim Studio AI MongoDB SSRF and Arbitrary Document Deletion (CVE-2026-3431)

www.tenable.com · 2026-03-02

## Key Vulnerability Information ### Vulnerability Overview - **Name**: Sim Studio AI - MongoDB SSRF and Arbitrary Document Deletion - **Rating**: Critical ### Vulnerability Details - **CVE ID**: CVE-…

CVSS 5.3

Chamilo LMS CVE-2024-50337 Unauthenticated Blind SSRF via OpenID

github.com · 2026-03-03

### Key Vulnerability Information #### Vulnerability Name Potential unauthenticated blind SSRF via openid function #### Vulnerability Severity - Severity Level: Moderate - CVSS v3 Base Metrics: 5.3 / …

CVSS 5.3

GLPI Unauthenticated SSRF Fix: OpenID Provider Whitelisting

github.com · 2026-03-03

From this webpage screenshot, the following key vulnerability information can be obtained: - **Vulnerability Type**: - Fixed a potential "unauthenticated covert SSRF (Server-Side Request Forgery)" vul…

CrewAI Framework Multiple Vulnerabilities Summary (RCE/SSRF/File Read)

www.kb.cert.org · 2026-04-02

# Vulnerability Summary: CrewAI Multiple Vulnerabilities (VU#221883) ## Vulnerability Overview This advisory identifies four critical security vulnerabilities within the CrewAI framework, including Re…

CVSS 5.0

OpenStack Glance SSRF Fix: SafeRedirectHandler & IP Normalization

security.openstack.org · 2026-04-02

### Vulnerability Overview A Server-Side Request Forgery (SSRF) vulnerability exists in the OpenStack Glance image import functionality. Attackers can bypass URL validation checks by utilizing HTTP re…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 616— Search: SSRF×

Security Intel Hub 616— Search: `SSRF`×