Attackers target a critical SonicWall SMA1000 vulnerability in the wild. Apply vendor hotfixes to secure remote access gateways against CVE-2026-102255.
@potato.software
@potato.softwareAttackers target a critical SonicWall SMA1000 vulnerability in the wild. Apply vendor hotfixes to secure remote access gateways against CVE-2026-102255.
@securityonline.bsky.socialAttackers target a critical SonicWall SMA1000 vulnerability in the wild. Apply vendor hotfixes to secure remote access gateways against CVE-2026-102255.
@cody-programmer08.bsky.socialGuess what the attack this is
#SQL #SSRF #Clickjacking #CSRF #Cybersecurity #CybersecurityAwarenessMonth
@securityonline.bsky.socialA Cisco Finesse vulnerability, SSRF flaw CVE-2026-20362, has been publicly disclosed. Fixes arrive in early 2027, with no workarounds.
#Cisco #CiscoFinesse #ContactCenter #CVE202620362 #SSRF #Horizon3 #UnifiedCCX #Vulnerability
@thedailytechfeed.comCritical CVSS 10 SSRF & three more holes patched in SonicWall’s SMA1000—upgrade now if on older firmware. #Cybersecurity #SonicWall #Vulnerability #SSRF #ZeroTrust thedailytechfeed.com/sonicwall-is...
@securityonline.bsky.socialA Gitea security update fixes 27 flaws, including SSRF bug CVE-2026-101027 and SSH key flaw CVE-2026-103059. Upgrade to Gitea 28.1.0 now.
#Gitea #Git #DevSecOps #SSRF #CVE2026101027 #CVE2026103059 #SupplyChainSecurity #Vulnerability
@securityonline.bsky.socialSonicWall SMA1000 vulnerability CVE-2026-102255 (CVSS 10) allows pre-auth SSRF. Three more flaws fixed. Upgrade to 12.5.0-03082 now.
#SonicWall #SMA1000 #CVE2026102255 #CVE2026102256 #SSRF #RemoteAccess #VPN #Vulnerability
@thedailytechfeed.comAxios HTTP/2 flaws allow SSRF bypass & Node.js crashes—patch ASAP. #Axios #Security #HTTP2 #Nodejs #Vulnerabilities #SSRF #DoS https://thedailytechfeed.com/critical-vulnerabilities-discovered-in-axios-http-2-patches-urgently-needed/
@securityonline.bsky.socialKiteworks vulnerabilities fixed in 9.5.1 include CVE-2026-102115, a 9.8 password reset flaw that enables admin account takeover. Patch now.
#Kiteworks #KiteworksVulnerabilities #CVE2026102115 #CVE2026102149 #CVE2026102147 #EmailSecurity #SSRF #PatchNow
@hugovalters.bsky.socialCVE-2026-61743 Chartbrew SSRF: DNS rebinding lets an authenticated user pivot validation to private addresses. CVSS 6.3. Fix in 5.2.2, still under review. Patch now. https://www.valtersit.com/cve/CVE-2026-61743/ #CVE #infosec #SSRF
@hugovalters.bsky.social300 lines of Python for testing SSRF: injects payloads, uses a collaborator host to catch callbacks. Advanced level. https://www.valtersit.com/python/ssrf-server-side-request-forgery-tester/ #security #python #ssrf
@offseq.bsky.socialObot <0.23.0 is vulnerable to HIGH severity SSRF via remote MCP URLs. Power Users+ can exploit this for internal/cloud metadata access. Upgrade to v0.23.0 now. https://radar.offseq.com/threat/obot-server-side-request-forgery-via-remote-mcp-server-url-a84328660b81bb11 #OffSeq #SSRF #CloudSecurity
@toxy4ny.bsky.social
@cyfar.ca@sentinelone.com
Exposed Hugging Face credentials enabled relay deployment, SSRF probes, and potential ChatGPT account provisioning.
-
IOCs: httpbin[.]org, mail[.]tm
-
# #SSRF #AI #ThreatIntel
@securityonline.bsky.socialA critical Langflow SSRF flaw (CVE-2026-12944) exposes cloud credentials and internal networks. Patch your Langflow OSS servers immediately.
@securityonline.bsky.socialA critical server-side request forgery flaw in the AWS Systems Manager Agent allows IAM credential theft. Patch your AWS Systems Manager Agent immediately.
#AWSSystemsManager #SSRF #CVE202689049 #CloudSecurity #InfoSec
@securityonline.bsky.socialA new ONLYOFFICE ownCloud plugin SSRF vulnerability, tracked as CVE-2026-84282, allows attackers to trigger unauthorized internal network requests.
#ONLYOFFICE #ownCloud #SSRF #Cybersecurity #CVE202684282 #Vulnerability
@thedailytechfeed.comRoundcube 1.6.19/1.7.4 patch fixes zero-click XSS, SSRF bypass & header injection — update now. #Security #Webmail #XSS #SSRF #Roundcube #CybersecurityNews https://thedailytechfeed.com/roundcube-webmail-urged-to-update-after-patch-fixes-12-critical-flaws/
@securityonline.bsky.socialThe Roundcube security update fixes 12 webmail flaws, including a zero-click stored XSS and an SSRF bypass. Update to 1.6.19 or 1.7.4 now.
#Roundcube #Webmail #XSS #SSRF #EmailSecurity #StoredXSS #PatchNow #Infosec