CVE ID :CVE-2026-60105 Published : July 8, 2026, 9:16 p.m. | 1 hour, 58 minutes ago Description :Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the isBlockedIP() function, which fails to...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-60105 - Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass

VERWANDTEARTIKEL

CVE-2026-47646 - Dynamics 365 Customer Voice Spoofing Vulnerability

CVE-2026-54782 - CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

CVE-2026-59723 - Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

CVE-2026-55471 - HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory

CVE-2026-55830 - RestrictedPython guard hooks can be shadowed via positional-only arguments

CVE-2026-55849 - @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument