Critical Alert 1 Active Exploit Detected Today

CVE-2026-64849 MLflow Server-Side Request Forgery Vulnerability →
Powered by CVE Watchtower
×
August 20, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-71880NVD

Vulnerability Summary

Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection
Severity Level
UNKNOWN
Published Date
Aug 18, 2026
Last Modified
Aug 18, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.38%Probability
Root Weakness (CWE)
N/A