CVE-2026-19770 - feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery
Brief
CVE ID : CVE-2026-19770
Published : Aug. 14, 2026, 2:16 a. m.
- 49 minutes ago
Description : A vulnerability was identified in feedmob fm-mcp-servers 0.
- 3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index. ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used.
The project was informed of the problem early through an issue report but has not responded yet.
Severity: 5.3
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...