CWE-918: Server-side request forgery (SSRF)
4,165 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 26 of them as exploited in the wild.
- Published CVEs
- 4,165
- Last 12 months
- 2,326
- Critical
- 487
- Known exploited
- 26
Critical 487High 1,380Medium 2,129Low 165Not scored 4
CVEs per yearBy the year they were published
- 20101
- 20168
- 201745
- 201875
- 201992
- 2020119
- 2021187
- 2022214
- 2023238
- 2024373
- 2025566
- 20262,245
Known exploitedNewest addition to KEV first
- CVE-2026-96655
Plex Media Server arbitrary-host SSRF
Plex · Media Server
ExploitedMedium5.3 - CVE-2026-96652
Plex Media Server SSRF
Plex · Media Server
ExploitedMedium5.3 - CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2026-49869
Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
kestra-io · kestra
ExploitedCritical10.0 - CVE-2026-64849
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
mlflow · mlflow
ExploitedCritical9.3 - CVE-2026-15409
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2026-20230
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Cisco · Cisco Unified Communications Manager
ExploitedHigh8.6 - CVE-2021-22054
VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an…
VMware Workspace ONE UEM console
ExploitedHigh7.5 - CVE-2021-22175
When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5…
GitLab · GitLab
ExploitedMedium6.8 - CVE-2020-7796
Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.
Product not named
ExploitedCritical9.8
Newest CVEs
- CVE-2026-18546
CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities
IBM · CockroachDB PostgreSQL for IBM VPC
Medium5.4 - CVE-2026-11547
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
IBM · WebSphere Application Server - Liberty
Medium4.3 - CVE-2026-107330
DataStage on Cloud Pak for Data has several vulnerabilities
IBM · DataStage on Cloud Pak for Data
High7.7 - CVE-2026-124466
OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri
openemr · openemr
Medium6.9 - CVE-2026-124442
AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connector Redirects
AzuraCast · AzuraCast
High7.1 - CVE-2026-123552
OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point
OpenIdentityPlatform · OpenAM
Medium6.3 - CVE-2026-123537
OpenAM before 16.1.4 SSRF via UMA Scope Description URLs
OpenIdentityPlatform · OpenAM
Medium5.3 - CVE-2026-123536
OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs
OpenIdentityPlatform · OpenAM
Medium5.1 - CVE-2026-17384
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.5 - CVE-2026-75590
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High7.2