CVE-2026-59931 | PHPOffice PhpSpreadsheet HTTP Redirect WEBSERVICE server-side request forgery

July 26, 2026 Yanac

A vulnerability classified as critical was found in PHPOffice PhpSpreadsheet. This impacts the function WEBSERVICE of the component HTTP Redirect Handler. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-59931. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More