EUVD-2026-30313Published
MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform …
Exact source revision recorded 28 Oct 2026 05:13:20 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2026-30313
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.