CVE-2026-118586

EUVD-2026-112558
A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. Performing a manipulation results in server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
SSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 23.99%
Common Weakness Enumeration
References
https://github.com/dfm/feedfinder2/
https://github.com/dfm/feedfinder2/issues/16
https://vuldb.com/cve/CVE-2026-118586
https://vuldb.com/submit/1026092
https://vuldb.com/vuln/428026
https://vuldb.com/vuln/428026/cti