FR

live

CVE-2025-15662 · CVSS 8.6 CVE-2025-50455 · CVSS 9.1 CVE-2025-59172 · CVSS 8.5 CVE-2025-68686 · Fortinet FortiOS

weakness type

CWE-610

2: vulnerabilities tracked
15 July 2026: latest publication

Most affected vendors

cve

Vulnerability watch

idvulnerabilityseveritypublished

CVE-2026-15583A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.NVD analysis in progress High CVSS 8.6 15/07 CVE-2026-10816Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabledCitrix Netscaler Application Delivery Controller High CVSS 7.5 30/06