CVE-2026-107046 — Vulnerability intelligence

—

Published: 2026-10-29T17:17:57.077

CVSS

5.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via supplying a crafted URL.

Sources

• CVE-2026-107046
• Original advisory
• Original advisory
• Original advisory