#ssrf

Adobe patched critical Adobe Campaign Classic flaws. CVE-2026-48331 scores CVSS 10.0 and enables arbitrary code execution. Update to build 9399 now. #Adobe #AdobeCampaignClassic #CVE202648331 #ArbitraryCodeExecution #Vulnerability #SSRF #SQLInjection #InfoSec #CyberSecurity https://securityonline.info/adobe-campaign-classic-cve-2026-48331/?utm_source=mastodon&utm_medium=jetpack_social

Four IBM WebSphere vulnerabilities are fixed, including a 9.8 pre-auth RCE (CVE-2026-14512) and a 9.4 SSRF (CVE-2026-14529). Patch now. #IBMWebSphere #CVE202614512 #SSRF #RCE #Vulnerability #InfoSec https://securityonline.info/ibm-websphere-vulnerabilities-rce/?utm_source=mastodon&utm_medium=jetpack_social

Four OpenDJ vulnerabilities are patched in 5.1.2. They include a CVSS 9.6 authorization bypass and an unauthenticated SSRF scoring CVSS 9.4. #OpenDJ #SSRF #LDAP #AuthorizationBypass https://securityonline.info/opendj-vulnerabilities-5-1-2/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-16812, a VeloCloud command injection scored CVSS 10, is exploited in the wild. Patch VeloCloud Orchestrator now, plus two related bugs. #VeloCloud #Arista #CVE202616812 #CommandInjection #ExploitedInTheWild #VCO #SSRF #Cybersecurity https://securityonline.info/velocloud-command-injection-cve-2026-16812/?utm_source=mastodon&utm_medium=jetpack_social

SSRF in mf-yang openclaw-cn (CVE-2026-17458) affects v0.2.0 & v0.2.1. MEDIUM severity, CVSS 5.3. Exploit details public, no patch yet. Restrict outbound server requests as interim mitigation. https://radar.offseq.com/threat/cve-2026-17458-server-side-request-forgery-in-mf-yang-openclaw-cn-a8d78509307a6c7f #OffSeq #SSRF #Vuln #mfyang

Microsoft Purview Data Governance is impacted by CVE-2026-57106 (SSRF, CVSS 10, CRITICAL). Remote attackers can escalate privileges — patch ASAP using the official fix: https://radar.offseq.com/threat/cve-2026-57106-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-purview-data-governance-0983080847f54f67 #OffSeq #Vuln #SSRF #Microsoft #CyberSec

Three Next.js vulnerabilities (CVE-2026-64645, CVE-2026-64649, CVE-2026-64642) enable Server-Side Request Forgery and middleware bypass. Patch now. #Nextjs #SSRF #CVE202664645 #WebSecurity #Vercel http://securityonline.info/nextjs-vulnerabilities-ssrf/?utm_source=mastodon&utm_medium=jetpack_social

SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now. #SonicWall #SMA1000 #SSRF #CVE202615409 #CyberSecurity https://securityonline.info/sonicwall-sma1000-ssrf/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-53513 is a Better Auth SSRF flaw (CVSS 9.6) in the SSO plugin. It exposes cloud metadata and enables account takeover. Patch to 1.6.11 now. #BetterAuth #SSRF #CVE202653513 #SSO #OIDC https://securityonline.info/better-auth-ssrf-cve-2026-53513/?utm_source=mastodon&utm_medium=jetpack_social

Five Apache Camel vulnerabilities enable server-side request forgery and a Keycloak authentication bypass. Upgrade to 4.21.0, 4.18.3, or 4.14.8. #ApacheCamel #SSRF #AuthBypass #Deserialization #Keycloak #InfoSec https://meterpreter.org/apache-camel-five-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

HawkTrace publicly disclosed Microsoft Exchange vulnerability CVE-2026-45504 with PoC exploit code. The SSRF flaw reads arbitrary files. Patch now. #MicrosoftExchange #CVE202645504 #SSRF #Cybersecurity #PoC #Infosec https://securityonline.info/microsoft-exchange-cve-2026-45504/?utm_source=mastodon&utm_medium=jetpack_social

🤖 CVE-2026-20230 (SSRF, CISA KEV): Cisco Unified Communications Manager flaw lets unauthenticated remote attackers write files to the OS and escalate to root. Actively exploited. CISA deadline: June 28. 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-20230 #CVE #SSRF #Cisco #CyberSec