Alertas de Seguridad de la Información

M Alto vulnerabilidad

23/07/2026

[CVE-2026-64799] Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users …

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible fold…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-65317] Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined wi…

Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin header and attacker-controlled host and port values. Attackers can bypass the localhost origin check in the API middleware by sending any Ori…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-65318] Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerab…

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can connect to the /ws/import_files WebSocket endpoint without authentication, specify arbitrary URLs in the HT…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-65056] mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to …

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visit_page tool, which only validates the URL protocol without filtering private or reserved IP ranges. Attackers can steer the LLM-controlled URL argument through prompt injection to navigate the …

nvdaltovulnerabilidad CVSS 8.2 NVD

M Crítico vulnerabilidad

21/07/2026

[CVE-2026-65057] Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticat…

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JSON payload with a malicious host parameter to cause the backend to issue outbound requests to internal services or cloud…

nvdcriticovulnerabilidad CVSS 9.3 NVD

M Alto vulnerabilidad

21/07/2026

[CVE-2026-63764] LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vuln…

LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py media handler, where the private-IP guard validates only the original URL without re-validating hosts after HTTP redirects. An unauthenticated attacker can submit a crafted image_url to the chat completions endpoint pointing to an att…

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-51031] FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the…

FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint. This allows a remote attacker to obtain sensitive information

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-63731] HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated…

HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to arbitrary internal destinations by supplying a caller-controlled host parameter to the ClickHouse proxy test endpoint with no URL validation or allowlist enforcement. Attackers can exploit the reflected error responses from the endpoint to disclose internal serv…

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-63769] Huginn through 2022.08.18 contains a server-side request forgery vulnerability in the fetch_url meth…

Huginn through 2022.08.18 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

20/07/2026

[CVE-2026-63107] LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the RES…

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use of the HTTP Host header in the getTemplateData() function to reach internal network services, cloud me…

nvdaltovulnerabilidad CVSS 7.7 NVD

A Alto vulnerabilidad

20/07/2026

[CVE-2026-62418] Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via…

Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability in Apache Syncope via Connectors and Resources check. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1. Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

18/07/2026

[CVE-2026-16128] A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receive…

A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This impacts the function receiver_thread of the file claw/services/swarm/swarm.c of the component http_request. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the p…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

18/07/2026

[CVE-2026-16127] A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get…

A vulnerability was identified in zevorn rt-claw up to 0.2.0. This affects the function claw_net_get/claw_net_post of the file claw/tools/tool_net.c of the component http_request. Such manipulation of the argument url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early thro…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

18/07/2026

[CVE-2026-16125] A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_n…

A vulnerability was found in zevorn rt-claw up to 0.2.0. The affected element is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_request. The manipulation of the argument url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem earl…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

18/07/2026

[CVE-2026-16084] A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch o…

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. This impacts the function web_fetch of the file pkg/tools/integration/web.go. This manipulation causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. Patch name: c15aac21fe05ee103a470e1104bc891754e83392. To fix this issue, it i…

nvdaltovulnerabilidad CVSS 7.3 NVD

L Alto vulnerabilidad

17/07/2026

[CVE-2026-7754] IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) …

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow 1.9.0 could allow server-side request forgery (SSRF) due to insecure default configuration and incomplete enforcement of the SSRF protection mechanism.

nvdaltovulnerabilidad CVSS 7.7 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-51833] Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add…

Xenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to add/save RSS feeds can enumerate internal services (ports) or expose the original IP address of the server.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-50151] oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in…

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the subsequent PUT request, allowing a malicious registry to return a cross-host Location and receive the caller's…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-16016] A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run…

A vulnerability was identified in poco-ai poco-claw up to 0.5.4. This issue affects the function run_task of the file executor/app/api/v1/task.py. The manipulation of the argument callback_url leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The reported GitHub issue was closed automatically due to inactiv…

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

17/07/2026

[CVE-2026-62234] Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users…

Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks with file://, dict://, or gopher:// URLs. Attackers can trigger webhook events to read local files, access process information, or pivot to internal services via unrestricted protocol handlers.

nvdaltovulnerabilidad CVSS 8.1 NVD