TI-2026-76442 CVE-2026-111936 · GHSA-37hh-79v8-v8vr
Server-side request forgery in Sigma File Manager extension downloads
Priority LOW 24
Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension download commands.