CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112299
MEDIUMCVSS 4.3NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProcessor.php of the component Album Website. Executing a manipulation of the argument Website can lead to server-side request
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog