CVE-2026-63441 | Bubka 2FAuth up to 7.x URL Validation isPublicIp server-side request forgery

A vulnerability has been found in Bubka 2FAuth up to 7.x and classified as problematic. This vulnerability affects the function AppServicesTraitsValidatesUrls::isPublicIp of the component URL Validation. This manipulation causes server-side request forgery.

This vulnerability is tracked as CVE-2026-63441. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More