CVE ID :CVE-2026-56771 Published : June 25, 2026, 6:07 p.m. | 1 hour, 3 minutes ago Description :NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal networks...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56771 - NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint

VERWANDTEARTIKEL

CVE-2026-56786 - RTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message

CVE-2026-56770 - libais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID

CVE-2026-56769 - Huly Platform - Server-Side Request Forgery via /import Endpoint

CVE-2026-56768 - Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method

CVE-2026-56767 - Maxun < 0.0.42 - Cross-Tenant IDOR in Storage and Webhook API Handlers

CVE-2026-56766 - Hydra - Stack Buffer Overflow in NTLM Authentication Handler