CVE-2026-49345 | sourcentis mercator up to 2025.05.18 /admin/config/parameters testProvider server-side request forgery (GHSA-6q97-4q5r-96j6)

June 19, 2026 Yanac

A vulnerability was found in sourcentis mercator up to 2025.05.18. It has been declared as critical. This affects the function testProvider of the file /admin/config/parameters. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-49345. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More