🔓 CVEs & KEV
- CVE-2026-64849 — CVSS 9.3 — MLflow Unauthenticated SSRF via Webhook Test Endpoint
📋 ADVISORIES
- 📄 Source for DeadLock Ransomware Uses Polygon Smart Contracts to Resist Takedowns — group-ib.com
Back to Cyber Hose
MLflow Unauthenticated SSRF via Webhook Test Endpoint
A CVSS 9.3 unauthenticated SSRF flaw in MLflow headlines this run, plus DeadLock ransomware leveraging Polygon smart contracts.
Need help assessing your exposure?
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check