CVE Intelligence

Zilliz vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Zilliz products: 2 record(s), with severity, exploitation and fixes.

Attu 2

Exploited only (KEV) →

CVE-2026-105049 Medium · 5.8 CWE-306 Oct 2, 2026
Missing Authentication for Critical Function in Zilliz Attu
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.
CVE-2026-105048 Medium · 4.0 CWE-1289 Oct 2, 2026
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to…
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).