Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenticated attacker could send a crafted request that caused the server to make an arbitrary outbound HTTP GET request to any host accessible from the server. This vulnerability is fixed in 0.7.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32096 Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler.… https://www.cve.org/CVERecord?id=CVE-2026-32096
Post summary
CVE‑2026‑32096 describes a SSRF vulnerability in Plunk’s SNS webhook handler that existed before version 0.7.0; no PoC, exploit, patch, or active exploitation is mentioned.
[CVE-2026-32096: CRITICAL] Cybersecurity alert: Plunk email platform on AWS SES had SSRF vulnerability pre-0.7.0 version in SNS webhook handler. Update to version 0.7.0 for fix against unauthenticated attacks.#cve,CVE-2026-32096,#cybersecurity https://cvefind.com/CVE-2026-32096
Post summary
The alert highlights a critical SSRF flaw in Plunk’s SES integration, recommending an immediate update to version 0.7.0 for remediation.
🚨 CVE-2026-32096: Plunk has SSRF via unvalidated A... Unauthenticated SSRF through AWS SNS webhook lets attackers pivot into internal networks via crafted SubscriptionConfir... https://zerodaysignal.com/vulnerability/CVE-2026-32096 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
Plunk’s AWS SNS webhook contains an unauthenticated SSRF flaw that can be used to pivot into internal networks; the vulnerability is disclosed with technical details but no active exploitation or patch is reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | useplunk | plunk | - | - | - |