CVE-2026-54734

Prebid Server Java prior to 3.43.0 is affected by a request forgery vulnerability in certain bidder adapters . The root cause is the interpolation of user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. An attacker who can su...