CVE-2026-57862

CVE-2026-57862 affects Kanboard 1.2.52 and earlier. The SSRF bypass arises when authenticated users submit hexadecimal-encoded IPs via user-controlled URLs, causing cURL to resolve internal resources. The isPrivateURL() filter in app/Core/Http/Client.php is considered safe due to FILTER_VALIDATE_...