CVE-2026-112299

A flaw was found in smr. A remote authenticated attacker can trigger Server-Side Request Forgery SSRF by supplying a manipulated website URL during album editing. Due to improper validation in the URL reachability check, the application can be induced to send unintended requests to arbitrary...