CVE-2026-88592

kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF) via the /getCorsFile cross-origin file proxy endpoint. The root cause is a parameter mismatch: the TrustHostFilter validates the first non-empty parameter in a fixed priority order, while the controller only reads and fetc...