Zilliz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Attu | 2 | – | Oct 2, 2026 |
Exploited and recent CVEs
- CVE-2026-105049 Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet. 0.2%
- CVE-2026-105048 The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses). 0.2%