Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-81891

1 brief RSS
high advisory

SSRF Protection Bypass in elFinder via DNS Rebinding

elFinder 2.1.69 and earlier are vulnerable to a DNS rebinding SSRF attack when PHP cURL is unavailable, allowing attackers to access internal or loopback network services.

elFinder +1 web-application rce file-upload cve-2026-81891
1r 4t 1c updated