Redirect2Admin: Exploiting an SSRF chain to leak internal keys and take over GitHub Enterprise Server
How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.
02 entries
How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.
Next.js published CVE-2026-75604 for a flaw in FileSystemCache on self-hosted Windows servers.