Vulnerabilities & PatchesEmerging1 src
CVE-2026-19770 - feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery
CVE ID : CVE-2026-19770
Published : Aug. 14, 2026, 2:16 a. m.
• 49 minutes ago
Description : A vulnerability was identified in feedmob fm-mcp-servers 0. 0. 3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index. ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used.
The project was informed of the problem early through an issue report but has not responded yet.
Severity: 5.3
• MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...