Skip to content
Standard Reader
Log in
Tag

Ssrf

Articles and publications tagged Ssrf across the Atmosphere.

11articles8publications
ioneyrezende
ioneyrezendeOct 29, 2026
From Virtual Key to Internal Target: Responding to LiteLLM SSRF
A response-focused review of CVE-2026-59823 from authenticated routing to network containment.
securityincident-response
eiuspkz
eiuspkzOct 28, 2026
Strapi's Webhook Runner Followed a Redirect Out of Its Trust Zone
Why Strapi webhook redirects need destination validation at every hop and how to investigate prior delivery.
StrapiSSRF
ivanova
ivanovaOct 24, 2026
A Subdomain Field That Became a Credential Harvester: SAP Cloud SDK CVE-2026-89111
A caller-supplied subdomain is string-substituted into the OAuth2 token URL, and the client secret travels in the form body. The 0.53.0-0.55.0 regression is the part the advisory does not mention.
sapoauth2
ivanova
ivanovaOct 23, 2026
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
vulnerabilityCVE-2026-96655
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Designing a reverse proxy that survives a Plex SSRF
Designing a reverse proxy that survives a Plex SSRF
vulnerabilityCVE-2026-96655
kozhevnikova
kozhevnikovaOct 23, 2026
Detecting CVE-2026-96655 exploitation in Plex logs
Detecting CVE-2026-96655 exploitation in Plex logs
vulnerabilityCVE-2026-96655
ioneyrezende
ioneyrezendeOct 23, 2026
The Plex patch cluster: why one CVE is not the whole story
The Plex patch cluster: why one CVE is not the whole story
vulnerabilityCVE-2026-96655
jeffreyciend
jeffreyciendOct 23, 2026
Account hygiene is the real control for CVE-2026-96655
Account hygiene is the real control for CVE-2026-96655
vulnerabilityCVE-2026-96655
eiuspkz
eiuspkzOct 23, 2026
CVE-2026-96655 on a small business network
CVE-2026-96655 on a small business network
vulnerabilityCVE-2026-96655
andreagomez205
andreagomez205Oct 23, 2026
Reading the KEV listing: CVE-2026-96655 and due dates that matter
Reading the KEV listing: CVE-2026-96655 and due dates that matter
vulnerabilityCVE-2026-96655
facilishz
facilishzOct 23, 2026
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
vulnerabilityCVE-2026-96655

You've reached the end.