AT
Product
Attu
2
CVEs
0
On KEV
5.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Attu to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105049 | 5.8 | Oct 2 | Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet Affected: 2.6.5 before 3.0.0 |
| CVE-2026-105048 | 4.0 | Oct 2 | The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses) Affected: 2.6.5 before 3.0.0 |
Showing 2