2 matches found
CVE-2026-54492
Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createPodcastChannel.view route accepts an authenticated user's private URL because app/Http/Requests/Subsonic/CreatePodcastChannelRequest.php does not apply the SafeUrl validation used by the regular...
4.3CVSS0.00265EPSS
SaveExploits0References4
CVE-2026-54492 Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation
Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subsonic-compatible createPodcastChannel.view route accepts an authenticated user's private URL because app/Http/Requests/Subsonic/CreatePodcastChannelRequest.php does not apply the SafeUrl validation used by the regular...
4.3CVSS5.7AI score
SaveExploits0References6
20