CVE-2026-125367 | Picosh Pico up to 4.1.2 Feeds Service Fetcher.ParseURL server-side request forgery

November 10, 2026 Yanac

A vulnerability described as critical has been identified in Picosh Pico up to 4.1.2. This vulnerability affects the function Fetcher.ParseURL of the component Feeds Service. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-125367. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More