Server-Side Request Forgery

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Spring WS SSRF via unvalidated WS-Addressing reply destinationsCVE-2026-40999Spring · CVSS 8.6 · 0.4% likelycovered by CyberSIXT

   CWE-918

2. Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL FetchingCVE-2026-22742Spring · CVSS 8.6 · 0.4% likely

   CWE-918

3. Spring Cloud Gateway SSRF and native file access with gRPCCVE-2026-47879Spring · CVSS 7.7 · 0.3% likely

   CWE-918

4. UDP adapter sends ack to attacker-supplied host:port parsed from packet body, even when acknowledge=falseCVE-2026-47861Spring · CVSS 6.3 · 0.3% likely

   CWE-918

5. In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packagesCVE-2026-59278Spring · CVSS 6.5 · 0.3% likely

   CWE-918

6. Potential arbitrary file read and SSRF vulnerability in Spring Cloud FunctionCVE-2026-59291Spring · CVSS 2 · 0.2% likely

   CWE-918

7. Spring Framework Server-Side Request Forgery via UriComponentsBuilderCVE-2026-41854Spring · CVSS 4.2 · 0.1% likely

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.