SSRF

Everything AppSec Scoop has reported about SSRF: 2 stories, newest first. Part of our Vulnerabilities coverage.

Organisations at Risk: AWS HealthLake MCP SSRF Lets Users Steal Temp Credentials via Pagination Tokens

A server-side request forgery flaw in the HealthLake MCP server allows remote attackers to steal AWS temporary security credentials via manipulated pagination tokens.

Oct 15, 2026

Vulnerabilities

Unpatched Kanbn 0.6.0 SSRF lets attackers steal cloud metadata and access internal services without credentials

Unauthenticated server-side request forgery in Kanbn versions up to 0.6.0 allows attackers to access cloud metadata and internal services without credentials.

Oct 15, 2026