CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
2 advisories matched
2026-10-30
Campfire SSRF Vulnerability Advisory (CVE-2026-100355): Internal Network Guard Bypass
[Affected Scope] All environments running Campfire version 1.4.4 and earlier.
[Impact] Authenticated users can bypass internal network restrictions using special-use IP ranges (CGNAT, NAT64, 6to4) to access internal resources and leak OpenGraph metadata.
[Mitigation] Immediately upgrade to Campfire v1.4.5 or later to apply security patches.
2026-09-23
Plex Media Server SSRF Vulnerability Advisory (CVE-2026-96655)
[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861
[Impact] Authenticated attackers can bypass network restrictions to access internal resources or perform unauthorized external requests.
[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.