CVE-2026-59931

CVE-2026-59931 (PhpSpreadsheet SSRF via WEBSERVICE domain whitelist bypass) Concrete technical details are present in connected sources: PhpSpreadsheet’s Calculation/Web/Service.php validates the host against a domain whitelist but uses file_get_contents() with a PHP HTTP stream wrapper that foll...