SSlab

Products

Exploited and recent CVEs

• CVE-2026-77866 Critical 9.0 SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts 0.5%
• CVE-2026-77972 Critical 9.0 safeurl validated address is not bound to the request, allowing DNS rebinding 0.3%
• CVE-2025-15056 Medium 5.1 Quill 2.0.3 - Lack of data validation in HTML export allowing XSS 0.3%