CVE-2026-105263Published
Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-105263 · Microsoft / collected KEV context
cve-program · CVE-2026-105263
- https://vuldb.com/vuln/413464
- https://vuldb.com/vuln/413464/cti
- https://vuldb.com/cve/CVE-2026-105263
- https://vuldb.com/submit/972906
- https://github.com/shaarli/Shaarli/security/advisories/GHSA-85jx-fhrf-q9w7
- https://github.com/shaarli/Shaarli/commit/8ca4de8e7c932a684481f5fbb1229fe16de1f4d2
- https://github.com/shaarli/Shaarli/releases/tag/v0.16.4
- https://github.com/shaarli/Shaarli/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.