Skip to content
OpenAdvisories

Vendor

samuelclay

2 known vulnerabilities.

Products

NewsBlur 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-56771

    NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint

    NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal networks by failing to filter private IP addresses. Attackers can exploit…

    samuelclay NewsBlur