CVE-2023-46945EXPLOITED

n/a · n/a

CVE-2023-46945: QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request

Description

QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a, 20230821

References

Related News (1 articles)

Tier C

VulDB6h ago

CVE-2023-46945 | QD 20230821 server-side request forgery

→ No new info (linked only)

CVSS 3.16.3 CRITICAL

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-918

PublishedApr 8, 2026

Last enriched5h agov2

Trending Score49

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-31040EXP

CVE-2026-31040: A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-fil

Trending: 45

HIGHCVE-2026-30080

CVE-2026-30080: OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported int

Trending: 27

NONECVE-2025-50671

CVE-2025-50671: A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_

Trending: 20

NONECVE-2025-50663

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usb_paswd.asp endpoint.

Trending: 20

NONECVE-2025-50662

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_group.asp endpoint.

Trending: 20

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Apr 8, 2026

Discovered by ZDM

Apr 8, 2026

Actively Exploited

Apr 8, 2026

Updated: affectedVersions, severity, cvssEstimate, cweIds, activelyExploited

Apr 8, 2026

Version History

Last enriched 5h ago

v2Tier C5h ago

Updated vendor to QD, product to QD 20230821, set severity to CRITICAL, updated CVSS score to 6.3, and added CWE-918.

affectedVersionsseveritycvssEstimatecweIdsactivelyExploited

via VulDB

v16h ago

Initial creation