Skip to content
OpenAdvisories

Vendor

LibreSpark

1 known vulnerabilities.

Products

LibreTV 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-123207

    LibreTV before v2.21.2 SSRF Protection Bypass via DNS Rebinding

    LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass checkUpstreamAllowed() by exploiting unpinned DNS resolution in fetchWithSafeRedirects(). Attackers controlling authoritative DNS can return …

    LibreSpark LibreTV