PULSEUnderground Intel

EN VIVO28señales / 24h

FEED

ransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food Productionransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Foundransomtitan reclama a PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED · IN · Healthcareransomworldleaks reclama a St. Francis Xavier Catholic School System · US · Educationransomworldleaks reclama a PinnPACK · US · Manufacturingransomspacebears reclama a DoAllTech · KR · Technologyransomspacebears reclama a Anpra SAS · CO · Business Servicesransomspacebears reclama a BiesSse Group · IT · Business Servicesransomqilin reclama a Postres Reina · ES · Agriculture and Food Productionransomsafepay reclama a wdk.de · DE · Not Foundransomsafepay reclama a jaecklin-industrial.de · DE · Manufacturingransomsafepay reclama a lbb-treuhand.de · DE · Business Servicesransomsafepay reclama a timetex.de · DE · Business Servicesransomsafepay reclama a stroebel-gruppe.de · DE · Manufacturingransomsafepay reclama a industriesjaro.com · CA · Manufacturingransomsafepay reclama a cenesco.de · DE · Not Found

← Todos los CVEs

CVE Watch5 jul 2026

CVE-2024-55399

4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).

CVSS

6.5

Medio

EPSS

0.3%

p17

KEV

—

Exploit Today

5

0-100

Publicado: 6 ago 2025 · Última mod.: 5 jul 2026 · CWE-918

EPSS · 30d

0.2%EPSS · 30 días0.3%

2026-06-302026-07-20

Descripción técnica

4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).

Referencias oficiales

gist.github.comhttps://gist.github.com/Jowu73/1e8cb2a5c73a79eb36f2c6b3d9eb1b83

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-202308.6 ALT

KEV—80Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability20d CVE-2026-1540910.0 CRÍ

KEV—70SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability5d CVE-2020-248819.8 CRÍ

——30SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.11d CVE-2026-445788.6 ALT

——30Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.5d CVE-2023-271597.5 ALT

——29Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.12d CVE-2026-483327.7 ALT

——29ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.6d