CVE-2026-72597 - A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny list. An attacker can use this to scan the internal network or access cloud metadata services. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-18545 [中危] CVE-2026-18545 - IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable t…
• CVE-2026-82289 [高危] CVE-2026-82289 - Gitingest through 0.3.1 fails to properly validate ho…
• CVE-2026-82285 [高危] CVE-2026-82285 - bisheng through 2.6.0-fix2 contains a server-side req…
• CVE-2026-82270 [高危] CVE-2026-82270 - Portkey AI Gateway through 1.15.2 contains a server-s…
• CVE-2026-82268 [高危] CVE-2026-82268 - Qwen-Agent through 0.0.34 contains a server-side requ…
• CVE-2026-82263 [中危] CVE-2026-82263 - Logto through 1.42.0 contains a server-side request f…
• CVE-2026-82262 [中危] CVE-2026-82262 - Logto through 1.42.0 contains a server-side request f…
• CVE-2026-55245 [未知] CVE-2026-55245 - Bifrost is an enterprise AI gateway for routing reque…