CVE Intelligence

Vulnerabilidades de Zilliz

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Zilliz: 2 registro(s), com severidade, exploração e correções.

Attu 2

Somente exploradas (KEV) →

CVE-2026-105049 Média · 5.8 CWE-306 02/10/2026
Missing Authentication for Critical Function em Zilliz Attu
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.
CVE-2026-105048 Média · 4.0 CWE-1289 02/10/2026
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to…
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).