CVE ID :CVE-2026-56266 Published : June 22, 2026, 9:04 p.m. | 2 hours, 5 minutes ago Description :Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation....

#Sicherheitslücke #AI

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56266 - Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints

VERWANDTEARTIKEL

CVE-2026-56348 - n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint

CVE-2026-56324 - Capgo - Rate Limit Bypass via User-Controlled device_id Parameter

CVE-2026-56323 - Capgo - Unauthenticated Channel Enumeration and App Oracle via GET /channel_self

CVE-2025-71358 - picklescan - Remote Code Execution via idlelib.autocomplete.AutoComplete.get_entity

CVE-2025-71339 - Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget

CVE-2025-71344 - picklescan - Arbitrary Code Execution via Undetected ensurepip._run_pip Function