Cwe-918

Apache Polaris — Cross-Tenant Credential Vending Before Location Validation in Iceberg REST Register (CVE-2026-64640) newCVE-2026-64640cloudHIGH 8.1Patched2026-08-09Cisco Unified Communications Manager WebDialer SSRF → Arbitrary File Write → Root (CVE-2026-20230) new KEV EPSS 88%CVE-2026-20230networkCRITICAL 8.6Patched2026-07-19SonicWall SMA1000 WorkPlace SSRF → Internal Erlang RPC Remote Code Execution (CVE-2026-15409) new KEV RW EPSS 84%CVE-2026-15409networkCRITICAL 10Patched2026-07-15ThingsBoard IoT Platform SSRF via SVG Image Upload (CVE-2025-34282) newCVE-2025-34282webCRITICAL 9.1Patched2026-07-06WordPress User Language Switch Plugin SSRF — CVE-2026-0745 newCVE-2026-0745webMEDIUMUnverified2026-07-05Unauthenticated SSRF in Ech0 via /api/website/title (CVE-2026-35037) newCVE-2026-35037webHIGHPatched2026-07-05Plunk SSRF via Unvalidated AWS SNS SubscriptionConfirmation — CVE-2026-32096 newCVE-2026-32096cloudCRITICAL 9.3Patched2026-07-05pdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801) newCVE-2026-26801webHIGHPatched2026-07-05Kan SSRF via Attachment Download Endpoint — CVE-2026-32255 new EPSS 21%CVE-2026-32255webHIGH 8.6Patched2026-07-05EspoCRM 9.3.3 Authenticated SSRF via Alternative IPv4 Loopback Notation — CVE-2026-33534 newCVE-2026-33534webMEDIUMPatched2026-07-05Chamilo LMS Unauthenticated install.ajax.php SSRF + Open Mail Relay — CVE-2026-33715 newCVE-2026-33715 / GHSA-mxc9-9335-45mcwebHIGH 7.5Unverified2026-07-05@haxtheweb/open-apis Credential Exposure via SSRF in cacheAddress Endpoint (CVE-2026-46391) newCVE-2026-46391webHIGHUnverified2026-07-05