secops-7 mikrodash vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.3CVE-2026-125363EPSS 0.2%2026-11-10

   MikroDash before 0.8.79 contains a server-side request forgery vulnerability that allows any signed-in user, including the viewer role, to target internal addresses through notification channels. Attackers can set webhook or mail destinati…