TI-2026-81169 CVE-2026-117565 · GHSA-m4rh-857p-qh9p
Unauthenticated SSRF in Artalk via comment page title fetch
Priority HIGH 70
Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments.