CVE-2026-84987 | code16 Sharp up to 9.22.5 Autocomplete Endpoint setRemoteEndpoint server-side request forgery

November 12, 2026 Yanac

A vulnerability described as critical has been identified in code16 Sharp up to 9.22.5. Affected is the function SharpFormAutocompleteRemoteField::setRemoteEndpoint of the component Autocomplete Endpoint. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-84987. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More