https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:00:00.222252+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-86539 CVE-2026-86539 — knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint 2026-10-05T13:00:00.237485+00:00

Affected: knowns-dev knowns

knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport error messages that reveal network reachability information.