{"vulnerability": "cve-2026-6300", "sightings": [{"uuid": "b4716598-b3b8-4c3b-a5c3-1491ad5f79b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjksujcrqf2k", "content": "", "creation_timestamp": "2026-04-15T21:14:53.810298Z"}, {"uuid": "e7ca6cf1-f432-4ce4-80ae-aba0c13ad3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "7b7d1437-6c78-4841-889a-d66707b05941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpqd3vz662l", "content": "", "creation_timestamp": "2026-04-17T20:12:41.277280Z"}, {"uuid": "319ed24c-b87e-4607-b86d-5a98825908d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "9e340135-4674-4d47-8640-913c6a1d16b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6300", "type": "published-proof-of-concept", "source": "Telegram/Dn6UYWmEFhbqEaa4T9ZHT6FP05ZyLAZt2ntZ1ss8t6QaCo0", "content": "", "creation_timestamp": "2026-04-15T23:26:33.000000Z"}, {"uuid": "f97574af-76ab-4d74-b52f-ec402f6d7244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "90137673-ee8c-4b2c-ba9e-7af4f9864f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63004", "type": "seen", "source": "https://gist.github.com/alon710/d92488505ce17a941a9b8015b1dda8cf", "content": "# CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63004\n\n## Summary\nCVE-2026-63004 is a server-side request forgery (SSRF) vulnerability in the Unleash feature management platform. Authenticated administrators with CREATE_ADDON or UPDATE_ADDON privileges can exploit this vulnerability to initiate requests to loopback addresses, private networks, and cloud metadata endpoints, potentially leading to information disclosure and credential extraction.\n\n## TL;DR\nAuthenticated administrators can exploit server-side request forgery (SSRF) in Unleash integrations to access internal services and extract cloud metadata credentials.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS Score**: 5.5 (Medium)\n- **Privileges Required**: High\n- **Exploit Status**: Proof of Concept\n- **Impact**: Server-Side Request Forgery & Information Disclosure\n\n## Affected Systems\n\n- Unleash Feature Management Platform\n- **Unleash**: < 7.5.2 (Fixed in: `7.5.2`)\n- **Unleash**: >= 7.6.0 < 7.6.5 (Fixed in: `7.6.5`)\n- **Unleash**: >= 8.0.0 < 8.0.2 (Fixed in: `8.0.2`)\n\n## Mitigation\n\n- Configure UNLEASH_ALLOW_PRIVATE_URL_IN_INTEGRATION=false to block outbound requests to private and local addresses\n- Establish an explicit integration allow-list using the UNLEASH_ALLOW_LIST_INTEGRATION environment variable\n- Implement host-level firewall rules to block outbound access to cloud metadata endpoints (169.254.169.254)\n\n**Remediation Steps:**\n1. Upgrade Unleash instances to versions 7.5.2, 7.6.5, or 8.0.2 or later\n2. Audit active integration configurations and webhook definitions for unauthorized loopback or private IP destinations\n3. Enforce network segmentation policies to restrict the server from initiating arbitrary egress connections to internal systems\n\n## References\n\n- [GHSA-5vf6-jrqr-78fj: Server-side request forgery in Unleash addons](https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj)\n- [Unleash Release v7.5.2 Patch](https://github.com/Unleash/unleash/releases/tag/v7.5.2)\n- [Unleash Release v7.6.5 Patch](https://github.com/Unleash/unleash/releases/tag/v7.6.5)\n- [Unleash Release v8.0.2 Patch](https://github.com/Unleash/unleash/releases/tag/v8.0.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63004) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T11:31:40.332070Z"}, {"uuid": "a52ba758-ff52-45e7-804a-82ea041c3d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63004", "type": "published-proof-of-concept", "source": "https://github.com/Unleash/unleash/security/advisories/GHSA-5vf6-jrqr-78fj", "content": "", "creation_timestamp": "2026-08-21T20:35:02.650508Z"}, {"uuid": "30d14af7-4b0c-4075-8d86-75b837caa3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6300", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnpzhqlwtf2e", "content": "\ud83d\udccc CVE-2026-6300 - Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML... https://www.cyberhub.blog/cves/CVE-2026-6300", "creation_timestamp": "2026-06-07T20:37:07.080566Z"}, {"uuid": "4a15de66-82f8-42bb-a751-0777b8588c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63003", "type": "published-proof-of-concept", "source": "https://github.com/django-cms/django-cms/security/advisories/GHSA-6x92-6vx4-5fwr", "content": "", "creation_timestamp": "2026-08-20T20:35:15.719938Z"}, {"uuid": "6c616b96-0d5e-4e63-a3ae-0f8dd0a22e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63000", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-m8r3-22v6-g877", "content": "", "creation_timestamp": "2026-09-23T16:35:04.698212Z"}, {"uuid": "f725c3ed-4373-4eb6-964e-797b04a857ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63002", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-w998-qmw9-mf4m", "content": "", "creation_timestamp": "2026-09-23T16:35:06.224926Z"}, {"uuid": "ed6e2eca-2b26-44ab-840a-31ea220d9d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63001", "type": "published-proof-of-concept", "source": "https://github.com/redaxo/core/security/advisories/GHSA-mf2p-wjp4-99pq", "content": "", "creation_timestamp": "2026-09-23T16:35:08.721198Z"}, {"uuid": "bf13fb93-db7f-4615-84fe-1463b0754d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63000", "type": "seen", "source": "https://gist.github.com/alon710/c6373b33ac6c019650400085845933ec", "content": "# CVE-2026-63000: CVE-2026-63000: Cross-Site Request Forgery in REDAXO CMS Package Update API\n\n> **CVSS Score:** 6.4\n> **Published:** 2026-09-23\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63000\n\n## Summary\nA Cross-Site Request Forgery (CSRF) vulnerability in REDAXO CMS prior to version 5.21.2 allows unauthenticated remote attackers to trigger unauthorized package updates by exploiting an insecure default configuration in the base API class.\n\n## TL;DR\nUnprotected API handler allows attackers to force authenticated administrators to perform unauthorized package updates via CSRF.\n\n## Technical Details\n\n- **CWE ID**: CWE-352\n- **Attack Vector**: Network\n- **CVSS**: 6.4 (Medium)\n- **EPSS Status**: None (recent 2026 listing)\n- **Impact**: Integrity Modification, Unauthorized Package Deployment\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- REDAXO CMS\n- **core**: < 5.21.2 (Fixed in: `5.21.2`)\n\n## Mitigation\n\n- Upgrade REDAXO CMS to version 5.21.2 or higher to resolve the insecure inheritance flaw.\n- Apply manual patch to the `api_package_update.php` file if immediate system upgrades are not possible.\n- Incorporate strict network routing or administrative session management controls to minimize exposure window.\n\n**Remediation Steps:**\n1. Navigate to the root directory of the REDAXO CMS installation.\n2. Download the updated package or pull the latest changes from the release tag 5.21.2.\n3. If patching manually, open the file `redaxo/src/addons/install/lib/api/api_package_update.php`.\n4. Add the `requiresCsrfProtection` method with a return value of `true` directly into the class scope.\n5. Test endpoint functionality by attempting to call the update handler without a valid CSRF token parameter to confirm that the API router rejects the request.\n\n## References\n\n- [GitHub Security Advisory GHSA-m8r3-22v6-g877](https://github.com/redaxo/core/security/advisories/GHSA-m8r3-22v6-g877)\n- [Fix Commit in REDAXO Repository](https://github.com/redaxo/core/commit/a13abbffbad4fdea46a4edc86cdba3335ca9e8f3)\n- [GitHub Pull Request 6579](https://github.com/redaxo/core/pull/6579)\n- [REDAXO 5.21.2 Release Details](https://github.com/redaxo/core/releases/tag/5.21.2)\n- [CVE-2026-63000 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-63000)\n- [NVD Vulnerability Details page](https://nvd.nist.gov/vuln/detail/CVE-2026-63000)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63000) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-23T18:31:57.687627Z"}]}