Skip to content
Threat Feed
Subscribe

Product

AWX

1 brief RSS
high advisory

SSRF Vulnerability in AWX Webhook Callback Mechanism (CVE-2026-71365)

An SSRF vulnerability in the AWX webhook status callback mechanism allows attackers with template-level administrative access to exfiltrate Git Personal Access Tokens via forged webhook payloads.

AWX webserver ssrf credential-theft vulnerability
2t 1c