CVE-2026-61520 | SimpleMachines SMF up to 2.1.6/2.x Image Proxy URL server-side request forgery

July 15, 2026 Yanac

A vulnerability described as problematic has been identified in SimpleMachines SMF up to 2.1.6/2.x. This issue affects some unknown processing of the component Image Proxy. Executing a manipulation of the argument URL can lead to server-side request forgery.

The identification of this vulnerability is CVE-2026-61520. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More