CVE-2026-111720 | lhccong fish-island-backend /api/web/parse url server-side request forgery

October 16, 2026 Yanac

A vulnerability classified as problematic has been found in lhccong fish-island-backend. The impacted element is an unknown function of the file /api/web/parse. This manipulation of the argument url causes server-side request forgery.

This vulnerability appears as CVE-2026-111720. The attack may be initiated remotely. There is no available exploit.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More