CVE-2026-117565

Artalk versions before 2.10.1 are vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause lies in the GetTitleByURL function, which only performs scheme validation when fetching a URL provided via the page_key parameter in anonymous comments submitted to /api/v2/comme...