Medium severity6.3NVD Advisory· Published Mar 30, 2026· Updated Apr 29, 2026

CVE-2026-5126

Description

A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

medium.com/@hemantrajbhati5555/discovering-a-blind-ssrf-vulnerability-in-a-php-rss-feed-parser-243f3ccbdafbnvd
vuldb.com/submit/780180nvd
vuldb.com/vuln/354158nvd
vuldb.com/vuln/354158/ctinvd
www.sourcecodester.comnvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000