critical9.1
CVE-2026-50886
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST reque…
Impact
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | grumpydictator/firefly-iii | <= 6.5.9 | none recorded |