Výsledky hledání

SPOJENO PŘES CVE ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-64849.

KEV ✓ EPSS 0.10 CVSS 6.8 CVE-2026-64849 MLflow veřejná správa US CA

tg: zneužíváno tg: zranitelnost tg: regulace

29. 10. 2026 · zachyceno 21:00 · Zero Day Initiative · ZDI-26-846: MLflow Webhook Server-Side Request Forgery Vulnerability 20. 8. 2026 13:06 · BleepingComputer · CISA warns of hackers exploiting critical MLflow vulnerability 19. 8. 2026 20:28 · Cyber Centre Kanada · MLflow security advisory (AV26-832) 19. 8. 2026 · zachyceno 20:30 · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog 19. 8. 2026 · zachyceno 20:00 · CISA KEV · MLflow Server-Side Request Forgery Vulnerability (CVE-2026-64849)