CVE-2026-3286 - Vulnerability Analysis

Overview

itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 contains a server-side request forgery caused by manipulation of the "img" argument in Image Save Endpoint, letting remote attackers make arbitrary server requests, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can make arbitrary server requests, potentially accessing internal resources or causing further attacks.

Mitigation

Update to the latest version or apply vendor patches when available.

References

• https://vuldb.com/?id.348015
• https://vuldb.com/?submit.758974
• https://fx4tqqfvdw4.feishu.cn/docx/NK7KdbIrboeB6WxwfhucW1YgnCb?from=from_copylink
• https://vuldb.com/?ctiid.348015

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner