NVD HIGH: CVE-2026-50236 — An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhoo...

Tuesday, August 11, 2026 at 12:17 PM UTC·Source: NIST NVD

Updated: Tuesday, August 11, 2026 at 04:00 PM UTC

Executive Summary

An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are fetched server-side without validation, with path neutralization enabling arbitrary endpoint targeting and full response reflection from the console pod's privileged network position.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-50236

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

HIGHVulnerabilityNEW

CISA KEV: Ray-Project Ray — Ray-Project Ray Code Injection Vulnerability

Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari.

CVE-2025-62593Ray-Project Ray

Just nowCISA KEV

MEDIUMVulnerability

Video Call Exploit Chains Two Flaws in Unisoc Modems

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.

1h agoDark Reading

CRITICALVulnerability

NVD CRITICAL: CVE-2026-75110 — MemOS is a memory operating system for LLMs and AI agents. In deployments where ...

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open: os.getenv("INTERNAL_SERVICE_SECRET") returns None and a request omitting the X-Internal-Service header al

CVE-2026-75110

1h agoNIST NVD