Product

Dozzle

1 brief RSS

Dozzle Pre-Auth SSRF Vulnerability via /api/notifications/test-webhook (CVE-2026-45298)

Dozzle is vulnerable to a pre-authentication Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-45298) in the default no-auth deployment that can expose internal resources.

dozzle ssrf cve-2026-45298

2r 1t 1i May 18, 2026