773 PoCs | 119 CISA KEV

tag

Cloud-Metadata

Typebot Unauthenticated Preview-Chat SSRF — CVE-2026-33712

CVE-2026-33712 web Patched

CVE-2026-33712webHIGHPatched2026-07-05Plunk SSRF via Unvalidated AWS SNS SubscriptionConfirmation — CVE-2026-32096

CVE-2026-32096 cloud Patched

CVE-2026-32096cloudCRITICAL 9.3Patched2026-07-05pdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)

CVE-2026-26801 web Patched

CVE-2026-26801webHIGHPatched2026-07-05MagicMirror² Unauthenticated SSRF via `/cors` Endpoint (CVE-2026-42281)

CVE-2026-42281 web Patched

CVE-2026-42281webCRITICAL 9.2Patched2026-07-05Kan SSRF via Attachment Download Endpoint — CVE-2026-32255 EPSS 21%

CVE-2026-32255 (GHSA-qrx8-9hc6-jvqg) web Patched

CVE-2026-32255webHIGH 8.6Patched2026-07-05Apache Flink Kubernetes Operator SSRF via jarURI (CVE-2026-40564)

CVE-2026-40564 cloud Patched

CVE-2026-40564cloudHIGHPatched2026-07-05