🛡️ Security

Server-Side Request Forgery (SSRF)

A vulnerability in which an attacker makes a server send requests to destinations of the attacker's choosing, borrowing the server's network position to reach internal or loopback-only services that are not directly exposed. Classified as CWE-918; the entry point of both 2026 SonicWall SMA1000 zero-day chains.

📚 Deep Dive

Learn Article

How SSRF Reaches Internal Services Behind the Perimeter

Server-side request forgery turns a server's network position into the attacker's. Why loopback-only services are the real target, and how to fix both ends of the chain.

intermediate 5 min read

Back to Glossary