CVE-2026-61520

creationtimestamp| type| source ---|---|--- 2026-07-27 03:11:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlweengnh2r 2026-07-27 03:11:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrlweem42i2m...

CVE-2026-61520 Simple Machines Forum SSRF via image proxy

Simple Machines Forum 2.1 prior to commit 4bf35cf and 3.0 prior to commit b4d23df contains a server-side request forgery vulnerability in the image proxy that allows authenticated attackers to trigger internal HTTP requests by embedding attacker-controlled URLs in BBCode image tags, which the pro...