Topic
13 articles
CyberSecureToday covers Server-Side Request Forgery across 13 articles published between 21 Sep 2026 and 11 Nov 2026.
The coverage includes 13 vulnerability advisories. 12 advisories are rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on Server-Side Request Forgery most often intersect with Vulnerability Analysis, Patch & Fix and Security Advisory, with Technology, Cloud & SaaS the most affected sector. The most recent story, “N-able Server-Side request forgery (SSRF) vulnerability i Server-Side Request Forgery Flaw Disclosed (CVE-2026-125881)”, was published 11 Nov 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelCVE-2026-125881 in N-able Server-Side request forgery (SSRF) vulnerability i (Server-Side Request Forgery) allows remote attackers to trigger arbitrary cod
MicrosoftCVE-2026-85951 in Azure Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 12.1.
Threat IntelCVE-2026-18836 in IBM API Connect (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 10.0.8.12 and l
AWS CloudCVE-2026-55160 in AWS Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
Threat IntelCVE-2026-59970 in Oracle Cloud Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Versio
AWS CloudCVE-2026-76898 in AWS Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Vendor security
MicrosoftCVE-2026-69435 in Azure Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Vendor securi
AWS CloudCVE-2026-12944 in AWS Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 1.10.0
Active ExploitCVE-2026-96655 in Plex Media Server (Server-Side Request Forgery) allows remote attackers to trigger active system exploitation. Patch: Version 1.43.3.1086
MicrosoftCVE-2026-58201 in Azure Enterprise Services (Server-Side Request Forgery) allows remote attackers to trigger arbitrary code execution. Patch: Version 2.1.2
MicrosoftMicrosoft discloses high-severity flaw CVE-2026-85917 in Azure AI Foundry allowing unauthenticated attackers to execute SSRF and elevate privileges over the network.
Active ExploitThreat actors actively weaponize high-severity flaw CVE-2026-33626 in LMDeploy within hours of release, using multimodal image loaders as SSRF proxies into cloud metadata.
GoogleGoogle Cloud resolves high-severity SSRF vulnerability CVE-2026-19486 in Gemini Enterprise Agent Platform App Builder allowing attackers to harvest GCP IAM service account tokens.