CVE-2026-42141

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability in the Xibo CMS allows users with Library upload permissions to make arbitrary HTTP requests from the CMS server to internal or external network resources. This can be exploited to scan internal infrastructure, access local cloud metadata endpoints (e.g., AWS IMDS), interact with internal services that lack authentication, or exfiltrate data. This vulnerability is fixed in 4.4.1.

• CWE-918

• https://github.com/xibosignage/xibo-cms/security/advisories/GHSA-fwq8-c4gw-pxmh

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42129A user with Viewer permissions can use a path traversal in t…7.7
• CVE-2026-4213A vulnerability was detected in D-Link DNS-120, DNR-202L, DN…9.8
• CVE-2026-42137Kirby is an open-source content management system. Prior to …6.5
• CVE-2026-42138Dify is an open-source LLM app development platform. Prior t…6.1
• CVE-2026-4214A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L,…9.8
• CVE-2026-42140PlantUML Macro is a macro for rendering UML diagrams from si…4.4
• CVE-2026-42142TypeBot is a chatbot builder tool. Prior to version 3.17.0, …7.1
• CVE-2026-42143Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2026-42144CImg Library is a C++ library for image processing. Prior to…6.1
• CVE-2026-42145Coolify is an open-source and self-hostable tool for managin…3.1
• CVE-2026-42146CImg Library is a C++ library for image processing. Prior to…5.5
• CVE-2026-42147Coolify is an open-source and self-hostable tool for managin…4.9