CVE-2026-75332

CriticalCVSS 9.1

Published: 26/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.download().

Risk Assessment

An attacker can exploit this vulnerability to make requests from the server to internal resources, potentially leading to information disclosure or attacks on internal systems.

Recommendation

It is recommended to validate and filter URLs in the download function and restrict access to it.

Original NVD description (English source)

Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.download().