CVE-2026-66325: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-66325
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-66325 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Server-side request forgery
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalCVE-2026-48331: Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability…nvd · 2026-08-03
- mediumCVE-2026-18736: Shlink contains a server-side request forgery vulnerability that allows authenticated API key …nvd · 2026-08-03
- unknownCVE-2026-69078: CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation rep…nvd · 2026-08-03
- mediumCVE-2026-67311: Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST dataso…nvd · 2026-08-01
- mediumCVE-2026-52371: A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job…nvd · 2026-07-31
- unknownCVE-2026-59231: Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 all…nvd · 2026-07-31
More from NVD Recent CVEs
- mediumCVE-2026-8508: An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S…2026-08-04
- highCVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel …2026-08-04
- mediumCVE-2026-18720: A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown co…2026-08-04
- mediumCVE-2026-17614: A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileReposito…2026-08-04
- mediumCVE-2026-18719: A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the fil…2026-08-04