Cybersecurity articles tagged #SSRF on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2026-83548-sonicwall-sma1000-ssrf-under-active-exploitationhttps://runtimerebel.com/blog/cve-2026-83548-sonicwall-sma1000-ssrf-under-active-exploitationA critical server-side request forgery (SSRF) vulnerability, CVE-2026-83548, in SonicWall SMA1000 Appliances is under active exploitation.Wed, 02 Sep 2026 19:13:21 GMTSonicWallSMA1000SSRFVulnerabilityCISA KEVhttps://runtimerebel.com/blog/detecting-ssrf-hostname-obfuscation-1u-ms-and-cloud-metadatahttps://runtimerebel.com/blog/detecting-ssrf-hostname-obfuscation-1u-ms-and-cloud-metadataAttackers are leveraging hostnames and services like 1u.ms to obfuscate IP addresses (e.g., 169.254.169.254), bypassing traditional SSRF blocklist defenses.Tue, 25 Aug 2026 16:30:00 GMTSSRFObfuscationCloud SecurityThreat Intelligence1u Mshttps://runtimerebel.com/blog/ssrf-scans-target-cloud-metadata-service-for-credential-accesshttps://runtimerebel.com/blog/ssrf-scans-target-cloud-metadata-service-for-credential-accessAttackers are conducting widespread scans for Server-Side Request Forgery (SSRF) vulnerabilities to access cloud metadata services and retrieve sensitive IAM credentials.Wed, 19 Aug 2026 16:24:58 GMTSSRFCloud SecurityIAMCredential TheftMetadata Servicehttps://runtimerebel.com/blog/mlflow-cve-2026-64849-exploited-cloud-credential-theft-via-ssrfhttps://runtimerebel.com/blog/mlflow-cve-2026-64849-exploited-cloud-credential-theft-via-ssrfAttackers exploit a critical MLflow SSRF vulnerability (CVE-2026-64849) to steal cloud credentials.Wed, 19 Aug 2026 08:25:32 GMTSSRFCloud SecurityMLflowFUXACVE-2026-64849https://runtimerebel.com/blog/cve-2026-58231-sap-commerce-cloud-unauthenticated-rce-flawhttps://runtimerebel.com/blog/cve-2026-58231-sap-commerce-cloud-unauthenticated-rce-flawSAP has patched a critical flaw, CVE-2026-58231, in Commerce Cloud Data Hub Adapter allowing unauthenticated arbitrary code execution. Immediate action is urged.Sat, 15 Aug 2026 00:40:41 GMTRCESSRFCVE-2026-58231SAP Commerce CloudUnauthenticatedhttps://runtimerebel.com/blog/sonicwall-sma-1000-series-zero-days-cve-2026-15409-mitigation-guidehttps://runtimerebel.com/blog/sonicwall-sma-1000-series-zero-days-cve-2026-15409-mitigation-guideSonicWall warns of active exploitation of two zero-day vulnerabilities in SMA 1000 series appliances, including a critical CVSS 10.0 SSRF (CVE-2026-15409).Wed, 15 Jul 2026 10:05:11 GMTSonicWallSMA1000CVE-2026-15409Zero-DaySSRFRemote Command Executionhttps://runtimerebel.com/blog/cisco-cucm-ssrf-flaw-rapid-exploitation-root-privilege-escalationhttps://runtimerebel.com/blog/cisco-cucm-ssrf-flaw-rapid-exploitation-root-privilege-escalationAttackers are rapidly weaponizing a Cisco Unified CM server-side request forgery (SSRF) flaw, escalating privileges to root. Immediate patching is critical.Fri, 26 Jun 2026 05:32:30 GMTCisco Unified CMCisco Unified CM SMESSRFPrivilege EscalationRoot AccessActive Exploitationhttps://runtimerebel.com/blog/cve-2026-20230-cisco-unified-cm-ssrf-actively-exploitedhttps://runtimerebel.com/blog/cve-2026-20230-cisco-unified-cm-ssrf-actively-exploitedCisco Unified CM Server is vulnerable to CVE-2026-20230, a high-severity SSRF flaw now under active exploitation. Patch immediately to prevent attacks.Wed, 24 Jun 2026 00:53:37 GMTCVE-2026-20230Cisco Unified Communications ManagerSSRFExploitationVulnerabilityhttps://runtimerebel.com/blog/dify-ai-platform-vulnerabilities-how-to-mitigate-difytap-exploithttps://runtimerebel.com/blog/dify-ai-platform-vulnerabilities-how-to-mitigate-difytap-exploitResearchers discover DifyTap vulnerabilities in the Dify AI platform, allowing attackers to exfiltrate chat histories and secrets through SSRF and RCE.Tue, 23 Jun 2026 13:17:28 GMTDifyAI SecurityCVE-2024-38505CVE-2024-38506SSRFRCEhttps://runtimerebel.com/blog/cisco-unified-cm-rce-via-cve-2026-20230-mitigation-guidehttps://runtimerebel.com/blog/cisco-unified-cm-rce-via-cve-2026-20230-mitigation-guideCisco patches CVE-2026-20230, a high-severity SSRF in Unified Communications Manager. Learn how public PoC code impacts your security and find remediation steps.Thu, 04 Jun 2026 17:08:33 GMTCiscoCVE-2026-20230Unified CMRCESSRFhttps://runtimerebel.com/blog/cisco-unified-cm-ssrf-cve-2024-20455-public-poc-mitigation-guidehttps://runtimerebel.com/blog/cisco-unified-cm-ssrf-cve-2024-20455-public-poc-mitigation-guideCisco warns of critical SSRF vulnerabilities in Unified CM with public PoC exploit code. Learn how to detect and patch CVE-2024-20455 to protect your network.Thu, 04 Jun 2026 09:26:39 GMTCiscoCVE-2024-20455Unified CMSSRFVulnerability Managementhttps://runtimerebel.com/blog/vmware-workspace-one-access-rce-via-cve-2022-22960-patch-nowhttps://runtimerebel.com/blog/vmware-workspace-one-access-rce-via-cve-2022-22960-patch-nowVMware Workspace ONE Access and Identity Manager face critical RCE vulnerabilities (CVE-2022-22960, CVE-2022-22957) actively exploited.Fri, 29 May 2026 05:34:10 GMTVMwareWorkspace ONE AccessIdentity ManagerCVE-2022-22960CVE-2022-22957CVE-2022-22954CVE-2022-22958RCESSRFAuthentication BypassZero-Dayhttps://runtimerebel.com/blog/cisco-ise-and-nexus-dashboard-rce-via-cve-2024-20469-mitigation-guidehttps://runtimerebel.com/blog/cisco-ise-and-nexus-dashboard-rce-via-cve-2024-20469-mitigation-guideCisco patches high-severity vulnerabilities in ISE, Nexus Dashboard, and Catalyst Center that enable RCE, SSRF, and DoS attacks. Secure your enterprise today.Thu, 07 May 2026 12:47:47 GMTCisco IseNexus DashboardCVE-2024-20469RCESSRFhttps://runtimerebel.com/blog/lmdeploy-ssrf-cve-2026-33626-exploit-and-mitigation-guidehttps://runtimerebel.com/blog/lmdeploy-ssrf-cve-2026-33626-exploit-and-mitigation-guideAttackers are actively exploiting CVE-2026-33626, a high-severity SSRF in LMDeploy, to access sensitive LLM data. Learn how to detect and patch this flaw.Fri, 24 Apr 2026 08:48:12 GMTCVE-2026-33626LMDeploySSRFLLM SecurityActive Exploitationhttps://runtimerebel.com/blog/uat-10608-exploits-next-js-cve-2024-34351-via-react2shell-scripthttps://runtimerebel.com/blog/uat-10608-exploits-next-js-cve-2024-34351-via-react2shell-scriptThreat actor UAT-10608 is leveraging an automated script to exploit a Next.js SSRF flaw, exfiltrating credentials and environment secrets from web applications.Mon, 06 Apr 2026 16:22:28 GMTCVE-2024-34351UAT 10608Next JsReact2ShellSSRFhttps://runtimerebel.com/blog/mitigating-attack-surface-expansion-in-distributed-llm-infrastructurehttps://runtimerebel.com/blog/mitigating-attack-surface-expansion-in-distributed-llm-infrastructureAn analysis of the security implications of exposing inference servers, vector databases, and orchestration APIs in self-hosted LLM environments.Mon, 23 Feb 2026 12:20:07 GMTLLMAPI SecurityInferenceSSRFOrchestration