CVE-2026-85612 | Openpanel-dev OpenPanel up to 2.2.x Url Parameter /misc/favicon url server-side request forgery

September 4, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Openpanel-dev OpenPanel up to 2.2.x. This impacts an unknown function of the file /misc/favicon of the component Url Parameter Handler. Executing a manipulation of the argument url can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-85612. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More