Server-Side Request Forgery

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Angular SSR is vulnerable to SSRF and Header Injection via request handling pipelineCVE-2026-27739angular · CVSS 9.2 · 0.6% likely

   CWE-918

2. Angular: SSRF and Cross-Origin Credential Disclosure via URL Resolution Discrepancy in SSRCVE-2026-88056angular · CVSS 8.6 · 0.5% likely

   CWE-918

3. Server-Side Request Forgery (SSRF) in Angular SSRCVE-2025-62427angular · CVSS 8.7 · 0.4% likely

   CWE-918

4. Angular: SSRF via Hostname Hijacking in @angular/platform-serverCVE-2026-46417angular · CVSS 8.8 · 0.4% likely

   CWE-918

5. Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-ServerCVE-2026-41423angular · CVSS 8.7 · 0.3% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.