DEV Community

#ssrf

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111

Comments
3 min read
A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller

A Model Registry With an Outbound Dial: What CVE-2026-64849 Hands an Unauthenticated Caller

Comments
4 min read
Detecting CVE-2026-96655 exploitation in Plex logs

Detecting CVE-2026-96655 exploitation in Plex logs

1
Comments 1
3 min read
Designing a reverse proxy that survives a Plex SSRF

Designing a reverse proxy that survives a Plex SSRF

Comments
3 min read
The Plex patch cluster: why one CVE is not the whole story

The Plex patch cluster: why one CVE is not the whole story

Comments
3 min read
CVE-2026-96655: what the Plex Media Server SSRF actually exposes

CVE-2026-96655: what the Plex Media Server SSRF actually exposes

Comments
3 min read
Reading the KEV listing: CVE-2026-96655 and due dates that matter

Reading the KEV listing: CVE-2026-96655 and due dates that matter

Comments
3 min read
Account hygiene is the real control for CVE-2026-96655

Account hygiene is the real control for CVE-2026-96655

Comments
3 min read
SSRF on a media server: the cloud instance case

SSRF on a media server: the cloud instance case

Comments
3 min read
Docker and NAS deployments: the CVE-2026-96655 upgrade gap

Docker and NAS deployments: the CVE-2026-96655 upgrade gap

Comments
3 min read
CVE-2026-96655 on a small business network

CVE-2026-96655 on a small business network

Comments
3 min read
Exploit attempts hit SonicWall two days after its patch

Exploit attempts hit SonicWall two days after its patch

Comments
3 min read
Hunting Gitea SSRF Abuse: Detection Guidance for CVE-2026-101027

Hunting Gitea SSRF Abuse: Detection Guidance for CVE-2026-101027

Comments
2 min read
When the model supplies the parameter: CVE-2026-54547 and CVE-2026-54549 in the Meta Ads MCP server

When the model supplies the parameter: CVE-2026-54547 and CVE-2026-54549 in the Meta Ads MCP server

Comments 1
3 min read
Server-side request forgery: the redirect that walks past your allowlist

Server-side request forgery: the redirect that walks past your allowlist

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.