CVE Intelligence
Skip to main content

Weakness and search-intent cluster

Curated intelligence cluster

SSRF vulnerabilities

25 of 39 pages in this cluster are on CISA's KEV catalog, and 25 are past its remediation deadline.

Pages

39

Ransomware-linked

11

confirmed

Public PoC

24

repositories found

39 pages · showing 1–39 · sorted by kev listed ↓

Published CVE pages, sorted by KEV listed descending
TitleVendorSignals
CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicWall2026-07-142026-07-1478%1018
CVE-2008-4128Cisco IOS Cross-Site Request Forgery VulnerabilityCisco2026-07-132008-09-1833%9.39
CVE-2026-20230Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCisco2026-06-252026-06-0383%8.613
CVE-2021-22054Omnissa Workspace ONE Server-Side Request ForgeryOmnissa2026-03-092021-12-1797%7.58
CVE-2021-22175GitLab Server-Side Request Forgery (SSRF) VulnerabilityGitLab2026-02-182021-06-1153%9.8none yet
CVE-2020-7796Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery VulnerabilitySynacor2026-02-172020-02-1884%9.8none yet
CVE-2021-39935GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityGitLab2026-02-032021-12-1336%7.5none yet
CVE-2025-61884Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityOracle2025-10-202025-10-1298%7.5
CVE-2021-21311Adminer Server-Side Request Forgery VulnerabilityAdminer2025-09-292021-02-1190%7.2none yet
CVE-2023-2533PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityPaperCut2025-07-282023-06-2029%8.8none yet
CVE-2019-9621Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilitySynacor2025-07-072019-04-3081%7.5none yet
CVE-2014-100005D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityD-Link2024-05-162015-01-1342%8none yet
CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityIvanti2024-01-312024-01-31100%8.221
CVE-2023-41763Microsoft Skype for Business Privilege Escalation VulnerabilityMicrosoft2023-10-102023-10-1090%5.3none yet
CVE-2022-41040Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft2022-09-302022-10-03100%8.849
CVE-2021-21973VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityVMware2022-03-072021-02-2488%5.3none yet
CVE-2021-21975VMware Server Side Request Forgery in vRealize Operations Manager APIVMware2022-01-182021-03-3178%7.5
CVE-2021-40438mod_proxy SSRFApache2021-12-012021-09-16100%969
CVE-2021-34473Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft2021-11-032021-07-14100%10119
CVE-2021-27103Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityAccellion2021-11-032021-02-1611%9.8
CVE-2021-26855Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft2021-11-032021-03-03100%7.5246
CVE-2021-22986F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityF52021-11-032021-03-31100%9.8
CVE-2021-21985VMware vCenter Server Improper Input Validation VulnerabilityVMware2021-11-032021-05-26100%9.870
CVE-2020-10181Sumavision EMR Cross-Site Request Forgery (CSRF) VulnerabilitySumavision2021-11-032020-03-1115%9.8none yet
CVE-2016-3718ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityImageMagick2021-11-032016-05-0577%5.5none yet
CVE-2026-73058stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypassstoatchatn/a2026-08-160%5.81
CVE-2026-57894Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository ExfiltrationGitea+1n/a2026-08-130%n/a1
CVE-2026-54794Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerabilityDelln/a2026-08-190%7.210
CVE-2026-50143Actor MCP path authority injection leaks Apify tokenapify+1n/a2026-08-180%8.12
CVE-2026-45123MyBB: IPv6 SSRFmybbn/a2026-08-180%4.329
CVE-2026-19753Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgeryModel Context Protocoln/a2026-08-130%7.35
CVE-2026-19751EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgeryEnzoVezzaron/a2026-08-130%6.34
CVE-2026-19650Cross-Site Request Forgery (CSRF) in GitLabGitLabn/a2026-08-170%7.15
CVE-2026-18952Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics PluginAWS+1n/a2026-08-120%8.14
CVE-2026-17608WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletionaresitn/a2026-08-160%6.51
CVE-2026-17565Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request ForgeryUnknownn/a2026-08-190%n/a5
CVE-2026-16294Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URLUnknownn/a2026-08-120%n/a5
CVE-2026-13700WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information DisclosureUnknownn/a2026-08-170%n/a10
CVE-2026-12564Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrfRed Hatn/a2026-08-180%9.61

Field coverage across these 39 pages: KEV listing date 25 · CVSS base score 35 · publication date 39 · EPSS 39 · threat-intel signals 0. Rows with no value on the column being sorted are listed last in both directions rather than counted as zero.

Reading a row

ransomware
CISA records known use in ransomware campaigns. Varies across this index, which is why it is on the row.
PoC
Public proof-of-concept repositories this deployment found on GitHub, and how many.
EPSS
FIRST's estimate of the probability the CVE is exploited in the next 30 days. Present on every record here.
CVSS
Base score, from scored sources only. "n/a" means no source scored it — not that the score is low.