Exploiting a server-side request forgery vulnerability in OopsSec Store's support form to access restricted internal pages.

Introduction: Foxit Workspace's November 6, 2026 security bulletin addresses critical vulnerabilities, specifically two Server-Side Request Forgery (SSRF) flaws (CVE-2026-119431 and CVE-2026-119433) and a Stored Cross-Site Scripting (XSS) vulnerability (CVE-2026-119432). These flaws highlight the inherent security risks associated with modern document collaboration platforms, where user-supplied content and backend server requests intersect. Understanding and mitigating these attack vectors is essential for cloud infrastructure administrators and application security professionals.

Posted by Benoit Tellier on Nov 06 Severity: low Affected versions: - Apache James 3.9.0 before 3.9.1 Description: In Apache James server prior version 3.9.1 improper validation in JMAP webPush SSRF validation did lead to the possibility to reach internal addresses. Users are recommended to upgrade to version 3.9.1 which fixes this issue. Credit: n0mi1k (finder) References: https://james.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-76171

CVE-2026-58141 | null | Affecting dify >= 0.6.0, < 1.15.0 | Severity: HIGH | CVSS: 7.2

Fixes 20 security issues, including HtmlSanitizer bypasses, SSRF gaps in HttpClient, skipped post-auth user checks and Request::getBaseUrl() host handling.

How can you find SSRF entry points without obvious URL parameters? Learn a practical 3-step methodology to identify potential SSRF vulnerabilities.

A server-side request forgery flaw in Home Assistant Green's aiohttp_client module, demonstrated at Pwn2Own, lets unauthenticated network-adjacent attackers force arbitrary HTTP requests and chain to root code execution.

Fixes about 20 security issues, including HtmlSanitizer URL bypasses, private-IP and SSRF checks, JsonPath and Yaml parsing costs, and user checkers skipped on programmatic logins.

TL;DR Roundcube released versions 1.6.21 and 1.7.6 on November 9, 2026, fixing 17 security bugs in its open-source webmail client. This Roundcube security update covers both the 1.6 LTS branch and the current 1.7 line. The bugs range from Sieve script injection to SSRF and CSRF bypasses. No CVE IDs or in-the-wild attacks have been confirmed so far. Admins should update all production servers now.

Posted by Robert Lazarski on Nov 06 Severity: moderate Affected versions: - Apache Axis2/Java before 2.0.2 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. When Axis2 built a service description from a WSDL, through ServiceClient, AxisService.createClientSideAxisService or WSDLToAxisServiceBuilder, it fetched the absolute URLs in wsdl:import locations and in xsd:import and xsd:include schemaLocations with no scheme or host restriction; the...

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances.

Posted by Robert Lazarski on Nov 06 Severity: important Affected versions: - Apache Axis2/Java before 2.0.2 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. An unauthenticated caller could supply a non-anonymous WS-Addressing wsa:ReplyTo or wsa:FaultTo address, and Axis2 would open a connection to that address to deliver the response or fault, allowing requests to internal hosts and delivery of response content to a host of the...