CVE-2026-116056 | KodCloud KodExplorer up to 4.56 Remote Download web.function.php request_url_safe server-side request forgery

October 24, 2026 Yanac

A vulnerability was found in KodCloud KodExplorer up to 4.56. It has been rated as critical. Affected is the function request_url_safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-116056. It is possible to initiate the attack remotely. There is no exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More