CVE-2026-57566 | Readest up to 0.11.9 OPDS Proxy route.ts url server-side request forgery

November 5, 2026 Yanac

A vulnerability was found in Readest up to 0.11.9. It has been classified as critical. The affected element is an unknown function of the file apps/readest-app/src/app/api/opds/proxy/route.ts of the component OPDS Proxy. The manipulation of the argument url leads to server-side request forgery.

This vulnerability is documented as CVE-2026-57566. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More