Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-19340 | anubissbe ProjectHub-Mcp up to 5.0.0 Webhooks API complete_backend.js url server-side request forgery (Issue 176 / EUVD-2026-54909)
Reagiere als Erste:r — dein Feedback zählt!
A vulnerability was found in anubissbe ProjectHub-Mcp up to 5.0.0. It has been classified as critical. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery.
This vulnerability is registered as CVE-2026-19340. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
The project was informed of the problem early through an issue report but has not responded yet.
SOCIAL SHARE CARD GENERATOR