medium6.3
CVE-2026-116056
A flaw has been found in KodCloud KodExplorer up to 4.56.
Impact
A flaw has been found in KodCloud KodExplorer up to 4.56. Affected is the function request_url_safe of the file app/function/web.function.php of the component Remote Download. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Product | Affected versions |
|---|---|
| KodCloud KodExplorer | before 4.56. |
Versions were read from the advisory text. No structured product data has been published for this record yet.