ZI
Vendor
Zilliz
2
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105049 | AT Attu Zilliz | 5.8 | Oct 2 | Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet |
| CVE-2026-105048 | AT Attu Zilliz | 4.0 | Oct 2 | The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses) |