Zilliz

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zilliz records in CISA KEV

No Zilliz vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-67379 CVE-2026-105048 · GHSA-f5vq-p2v5-96j9

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).

MEDIUM 52

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00231 Published 2026-10-02 Fixed in 3.0.0 CWE-1289

TI-2026-67380 CVE-2026-105049 · GHSA-4xhx-g43j-j7vj

Missing authentication in Zilliz Attu

LOW 31

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00222 Published 2026-10-02 Fixed in 3.0.0 CWE-306

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0