https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:42:10.880800+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-92569 CVE-2026-92569 — Hippo4j through 1.5.0 SSRF via clientAddress Parameter 2026-09-28T11:42:10.882955+00:00

Affected: opengoofy hippo4j

Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET requests to internal networks and cloud metadata services.