Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:49:21 +0000 CVE-2026-44116 — OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation https://cve.radiocsirt.org/vuln/cve-2026-44116 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin&#39;s sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can bypass SSRF protection by providing malicious photo URLs to the Zalo Bot API, enabling unauthorized access to internal resources.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin&#39;s sendPhoto function that fails to validate outbound photo URLs through the SSRF guard. Attackers can bypass SSRF protection by providing malicious photo URLs to the Zalo Bot API, enabling unauthorized access to internal resources.</p> https://cve.radiocsirt.org/vuln/cve-2026-44116