Tag: CVE-2026-64849

Critical CVEs

CVE-2026-64849 — MLflow Server-Side Request Forgery Vulnerability

MLflow Server-Side Request Forgery Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…

CISA KEV CVE-2026-64849 MLflow

August 19, 2026

Critical CVEs

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Two critical vulnerabilities in open-source platforms are under active exploitation, according to independent reports from watchTowr and VulnCheck. The first, CVE-2026-64849 (CVSS…

active exploitation cloud credentials CVE-2026-25895 CVE-2026-64849

August 18, 2026