Unintended Proxy or Intermediary

Every one of the 205 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Spring Cloud Netflix - Server-Side Request ForgeryCVE-2020-5412Spring by VMware · 10% likely

   Spring by VMware

2. code-server session cookie can be extracted by having user visit specially crafted proxy URLCVE-2025-47269coder · CVSS 8.3 · 56% likely

   Coder

3. MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both W…CVE-2019-3924Tenable · 16% likely

   Tenable

4. ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.CVE-2019-3996Elog Project · 6.6% likely

   Elog Project

5. An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 40…CVE-2021-20042SonicWall · 3.7% likely

   SonicWall

6. Cisco DNA Center Unintended Proxy Via SWIM Import Interface VulnerabilityCVE-2019-1841Cisco · CVSS 6.5 · 2.6% likely

   Cisco

7. Holes in EndpointSlice Validation Enable Host Network HijackCVE-2021-25740Kubernetes · CVSS 3.1 · 2.2% likely

   Kubernetes

8. Webhook redirect in kube-apiserverCVE-2020-8561Kubernetes · CVSS 4.1 · 2.1% likely

   Kubernetes

9. Loopback bypass in CoturnCVE-2020-26262coturn · CVSS 7.2 · 1.5% likely

   Coturn Project

10. An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component.…CVE-2018-16598Amazon · 1.5% likely

    Amazon

11. KanColleViewer versions 3.8.1 and earlier operates as an open proxy which allows remote attackers to trigger outbound network traffic.CVE-2015-2947Grabacr.net · 1.5% likely
12. Metabase vulnerable to Remote Code Execution via H2CVE-2022-39361metabase · CVSS 8.8 · 1.3% likely

    Metabase

13. Authorization bypass in ContourCVE-2021-32783projectcontour · CVSS 8.5 · 1.2% likely

    Projectcontour

14. Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`CVE-2026-44494axios · CVSS 8.7 · 1.1% likelycovered by CyberSIXT

    Axios

15. Confused deputy attack in sandbox module resolutionCVE-2021-32773racket · CVSS 6.1 · 0.9% likely
16. Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET RemotingCVE-2026-39906Unisys · CVSS 7 · 0.7% likely

    Unisys

17. Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotationCVE-2026-72526Red Hat · CVSS 9.9 · 0.7% likelycovered by CyberSIXT

    Red Hat1 article

18. Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscr…CVE-2026-49086Apache Software Foundation · CVSS 6.5 · 0.7% likely

    Apache

19. Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTT…CVE-2026-46592Apache Software Foundation · CVSS 7.5 · 0.6% likely

    Apache

20. Gitea fork workflow approval bypass through maintainer-triggered eventsCVE-2026-94205Gitea · CVSS 9.8 · 0.6% likely

    Gitea

21. Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restrictionCVE-2026-67567Red Hat · CVSS 9.9 · 0.6% likelycovered by CyberSIXT

    Red Hat1 article

22. kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPathCVE-2026-100706kyverno · CVSS 9.9 · 0.6% likely

    Kyverno

23. Azure Arc Elevation of Privilege VulnerabilityCVE-2026-69399Microsoft · CVSS 9.9 · 0.6% likely

    Microsoft

24. Conduit-derived homeservers are affected by a Confused Deputy and Improper Input Validation issueCVE-2025-68667continuwuity · CVSS 9.9 · 0.6% likely
25. Cluster-proxy: impersonation-header injection grants cluster-admin on every managed clusterCVE-2026-17107Red Hat · CVSS 8.5 · 0.6% likely

    Red Hat

26. Cross-Cluster Impersonation Confused-Deputy Privilege EscalationCVE-2026-44945SUSE · CVSS 9.1 · 0.6% likelycovered by CyberSIXT

    SUSE

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.