CVE ID :CVE-2026-71495 Published : Nov. 6, 2026, 6:05 p.m. | 1 hour, 6 minutes ago Description :Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.20.0, when PUBLIC_PRIVATE_INSTANCE is not set to true, the unauthenticated POST /api/v1/trail/download handler...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-71495 - Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access

VERWANDTEARTIKEL

CVE-2026-109469 - Entra Device Registration Elevation of Privilege Vulnerability

CVE-2026-59104 - UgCS server HCI authentication bypass with empty credentials

CVE-2026-68935 - Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections

CVE-2026-50240 - Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount

CVE-2026-86005 - Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew

CVE-2026-85712 - Chartbrew: Cross-tenant project takeover via body.team_id in /project routes