CVE-2026-121581

Name of the Vulnerable Software and Affected Versions ArcReel versions 0.32.0 through 0.34.0

Description An issue in the Provider Test-Connection Endpoint allows remote attackers to perform server-side request forgery (SSRF), a technique where the server is tricked into making unauthorized requests to internal or external resources. This occurs via an unknown function within the '/api/v1/providers/{id}/test' endpoint, specifically involving the id variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/api/v1/providers/{id}/test' endpoint to minimize the risk of exploitation.