<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Ssrf on Onur Baydaş</title><link>https://onurbaydas.com/en/tags/ssrf/</link><description>Recent content in Ssrf on Onur Baydaş</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Thu, 22 Oct 2026 10:32:06 +0300</lastBuildDate><atom:link href="https://onurbaydas.com/en/tags/ssrf/index.xml" rel="self" type="application/rss+xml"/><item><title>CISA KEV Alert: Plex Media Server SSRF vulnerability</title><link>https://onurbaydas.com/en/news/2026-10-22-cisa-plex-media-server-ssrf/</link><pubDate>Thu, 22 Oct 2026 10:32:06 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-22-cisa-plex-media-server-ssrf/</guid><description>CISA has issued an alert regarding an actively exploited Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-96652) in Plex Media Server. This flaw allows attackers to force the Plex server to send a POST request to a chosen destination and can be chained with other vulnerabilities.</description></item><item><title>Server-Side Request Forgery (SSRF) Vulnerability in Plex Media Server</title><link>https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/</link><pubDate>Wed, 21 Oct 2026 10:35:55 +0300</pubDate><guid>https://onurbaydas.com/en/news/2026-10-21-plex-media-server-ssrf/</guid><description>CISA has warned about an actively exploited SSRF vulnerability (CVE-2026-96655) in Plex Media Server. This flaw allows an authenticated user to send requests to arbitrary internal or external addresses via the &amp;#39;/video/:/transcode/universal&amp;#39; path.</description></item></channel></rss>