CVE-2026-118586

dfm feedfinder2 feedfinder2.py find_feeds server-side request forgery

dfm feedfinder2

Open in Threatline Record JSON

CVSS

6.9Medium

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-118586 A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py . Performing a manipulation results in serveTelegram: CVE Notify, 29 Oct 2026

Description

A security flaw has been discovered in dfm feedfinder2 up to 0.0.4. This issue affects the function find_feeds of the file feedfinder2.py. Performing a manipulation results in server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

Text from CVE List

Affected versions 4

feedfinder2affected: 0.0.1CVE List
feedfinder2affected: 0.0.2CVE List
feedfinder2affected: 0.0.3CVE List
feedfinder2affected: 0.0.4CVE List