CVE-2026-48051 | papra-hq Papra up to 26.4.x Webhook Delivery System server-side request forgery

July 27, 2026 Yanac

A vulnerability classified as critical has been found in papra-hq Papra up to 26.4.x. This vulnerability affects unknown code of the component Webhook Delivery System. Performing a manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-48051. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More