Skip to content
pwned.coffee
Updated 38 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
19 Aug 2026
1 new, 0 updated.
New that day
high
patched
exploited
19 Aug 2026
MLflow Server-Side Request Forgery Vulnerability
MLflow MLflow
MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body. Added to CISA KEV on 2026-08-19 (federal deadline 2026-09-02).
CVE-2026-64849
3 sources