CVE ID :CVE-2026-114493 Published : Oct. 21, 2026, 5:54 p.m. | 12 minutes ago Description :LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-114493 - LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects

VERWANDTEARTIKEL

CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

CVE-2026-111812 - Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

CVE-2026-111811 - Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

CVE-2026-113870 - Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

CVE-2026-114268 - Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow

CVE-2026-111804 - Apache Traffic Server: wasm plugin has a use-after-free and forwards unvalidated guest metric IDs