Everything RedTeam Monitor has reported about SSRF: 3 stories, newest first. Part of our Vulnerabilities coverage.
A flaw in the AWS HealthLake MCP server lets remote users with valid logins trick the system into sending temporary security keys to attacker-controlled servers.
A server-side request forgery in an AI agent tool allowed attackers to steal operator credentials via crafted prompts.
An unauthenticated remote attacker can exploit improper input validation in Cisco Finesse to forge server-side requests and access limited sensitive data.