ZeroDay Findings
Sign inSign up

Findings

CVE-2026-92204

ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Published Sep 16, 2026

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-92204.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 16, 2026 · Catalog

    Detected

    This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-92204.

Sources

  • CVE.orgCVE-2026-92204

    Official CVE identifier

    cve.org
  • Zero Day InitiativeZDI-26-704

    This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-92204.

    zerodayinitiative.com