https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:03:24.541268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33953 CVE-2026-33953 — LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce 2026-10-07T01:03:24.557855+00:00

Affected: Kovah LinkAce

LinkAce is a self-hosted archive to collect website links. Versions prior to 2.5.3 block direct requests to private IP literals, but still performs server-side requests to internal-only resources when those resources are referenced through an internal hostname. This allows an authenticated user to trigger server-side requests to internal services reachable by the LinkAce server but not directly reachable by an external user. Version 2.5.3 patches the issue.