SSRF

Everything Sandbox Gazette has reported about SSRF: 2 stories, newest first. Part of our Vulnerabilities coverage.

How does crafted next_token in AWS HealthLake MCP Server expose credentials before 0.0.14?

A flaw in the pagination handler of the AWS HealthLake MCP Server allows attackers to steal temporary security credentials before version 0.0.14.

Oct 15, 2026

Attackers are targeting a maximum-severity server-side request forgery flaw in SonicWall SMA 1000 security management appliances.

Oct 12, 2026