https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:18:23.164268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337088 EUVD-2026-337088 2026-10-06T02:18:23.212928+00:00 EUVD-2026-337088 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34282 fkie_cve-2025-34282 2026-10-06T02:18:23.212974+00:00

ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources.

 https://cve.radiocsirt.org/vuln/ghsa-c4r5-r62q-8988 GHSA-c4r5-r62q-8988 2026-10-06T02:18:23.213014+00:00

ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may initiate unintended outbound requests. This can be used to access internal services or resources.