Topic

CWE-918: news, advisories and analysis

6 articlesUpdated 4 Oct 2026

CyberSecureToday covers CWE-918 across 6 articles published between 17 Sep 2026 and 4 Oct 2026. The coverage includes 6 vulnerability advisories. 6 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on CWE-918 most often intersect with SSRF, IMDSv2 and Artificial Intelligence, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control”, was published 4 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSCritical
AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control
CVE-2026-103956 in AWS Labs Loom (CVSS 10.0) let any network client act as super-admin on IdP-less deployments. Two SSRF flaws leaked tokens. Upgrade to 1.7.0+.
Aisha Noor4 Oct 20267 min read
ThreatsCloud & SaaSHigh
AWS Systems Manager Agent SSRF Vulnerability Allows Link-Local IMDS Credential Theft CVE-2026-89049
AWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.
Aisha Noor28 Sep 20268 min read
ThreatsCloud & SaaSCritical
LiteLLM Proxy Request Validation Bypass Exposes Cloud Metadata to SSRF Exploitation CVE-2026-59823
A critical server-side request forgery flaw in LiteLLM AI proxies allows remote attackers to bypass egress restrictions and steal cloud instance credentials.
Aisha Noor27 Sep 20268 min read
ThreatsCloud & SaaSHigh
Open WebUI DNS Rebinding SSRF Exposes Cloud Metadata and Internal Services
A critical TOCTOU race condition flaw CVE-2026-87996 in Open WebUI enables attackers to execute DNS rebinding SSRF attacks and harvest cloud metadata and credentials.
Priya Raman25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Azure AI Foundry Server-Side Request Forgery Flaw Exposes Internal Agent Infrastructure CVE-2026-85917
Microsoft discloses high-severity flaw CVE-2026-85917 in Azure AI Foundry allowing unauthenticated attackers to execute SSRF and elevate privileges over the network.
CST Editorial Desk23 Sep 202615 min read
ThreatsCloud & SaaSHigh
Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks
CISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Tom Verhoeven17 Sep 202612 min read

Latest coverage

AWS Loom AI Agent Platform Flaw Gave Unauthenticated Attackers Super-Admin Control

AWS Systems Manager Agent SSRF Vulnerability Allows Link-Local IMDS Credential Theft CVE-2026-89049

LiteLLM Proxy Request Validation Bypass Exposes Cloud Metadata to SSRF Exploitation CVE-2026-59823

Open WebUI DNS Rebinding SSRF Exposes Cloud Metadata and Internal Services

Azure AI Foundry Server-Side Request Forgery Flaw Exposes Internal Agent Infrastructure CVE-2026-85917

Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks