CVE-2026-73629 | s9y Serendipity up to 2.5.x serendipity_url_allowed server-side request forgery

August 13, 2026 Yanac

A vulnerability labeled as problematic has been found in s9y Serendipity up to 2.5.x. The affected element is the function serendipity_url_allowed. The manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-73629. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More