Topic
1 article
CyberSecureToday covers CWE-367 in a story published 25 Sep 2026.
The coverage includes 1 vulnerability advisory. 1 advisory is rated critical or high severity.
Stories on CWE-367 most often intersect with Open WebUI, SSRF and DNS Rebinding, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Open WebUI DNS Rebinding SSRF Exposes Cloud Metadata and Internal Services”, was published 25 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA critical TOCTOU race condition flaw CVE-2026-87996 in Open WebUI enables attackers to execute DNS rebinding SSRF attacks and harvest cloud metadata and credentials.