CVE Watch2 jul 2026

CVE-2026-54430

liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() function. The AWS ALB verifier reads both signe

CVSS

—

Sin CVSS

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 2 jul 2026 · Última mod.: 2 jul 2026 · CWE-918

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-07-032026-07-16

Descripción técnica

liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() function. The AWS ALB verifier reads both signer and kid from the unverified JWT header. If signer matches the configured ARN, kid is appended to alb_base_url without URL encoding or path sanitization, and the HTTP GET is issued before signature verification. This allows an attacker to force the server to send a GET request to an attacker-chosen internal path. This issue was fixed in version 2.3.0

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-202308.6 ALT

98.5%

KEV—80Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability16d CVE-2026-1540910.0 CRÍ

66.4%

KEV—70SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability1d CVE-2020-248819.8 CRÍ

99.4%

——30SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.7d CVE-2026-445788.6 ALT

98.4%

——30Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.21h CVE-2023-271597.5 ALT

98.3%

——29Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.8d CVE-2026-483327.7 ALT

95.7%

——29ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.2d