https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-27T15:26:37.639252+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116066 CVE-2026-116066 — Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service 2026-10-27T15:26:37.640147+00:00

Affected: Firecrawl

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time, retrieving cloud metadata and internal resources through the scrape API.