Vulnerabilities
Attackers Exploit SonicWall SMA 1000 SSRF Flaw Days After Disclosure
Unauthenticated attackers are actively exploiting a critical server-side request forgery flaw in SonicWall appliances, shortly after public disclosure.
SSRF
Everything Threat Times has reported about SSRF: 7 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Attackers Target Maximum-Severity SSRF Flaw in SonicWall SMA 1000 Appliances
Threat actors are currently targeting a maximum-severity server-side request forgery vulnerability in SonicWall SMA 1000 network security appliances.
Vulnerabilities
Critical OAuth2 SSRF in SAP Cloud SDK for Python Exposes Client Credentials
A vulnerability in the SAP Cloud SDK for Python allows attackers to redirect token requests, leading to credential theft in multi-tenant BTP applications.
Vulnerabilities
Crawl4AI 0.9.4 Patch Fixes Critical SSRF Flaw in Web Scraping Library
The National Vulnerability Database rates CVE-2026-109238 as critical because attackers can force the tool to fetch internal network resources.
Vulnerabilities
SonicWall Releases Hotfixes for CVSS 10.0 Pre-Auth SSRF in SMA1000 Appliances
SonicWall has issued hotfixes for four security flaws in its SMA1000 remote access appliances, including a pre-authentication SSRF vulnerability rated 10.0.
Vulnerabilities
Dromara Skyeye Patched for Critical SSRF and Auth Bypass Vulnerability
A critical flaw in Dromara Skyeye allows unauthenticated attackers to overwrite files and access internal resources via a callback endpoint.
Vulnerabilities
Cisco Fixes Unauthenticated SSRF Vulnerability in Finesse Server Management Interface
Cisco has issued a high-severity advisory for CVE-2026-20362, an unauthenticated server-side request forgery flaw in Cisco Finesse that allows remote attackers to access sensitive service information.