CVE-2026-46561

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest (used by the parse_urls API). An authenticated attacker can supply a URL pointing to an attacker-controlled server that responds with a 302 redirect to an internal/private IP address, bypassing the is_global_host() check on the initial URL. This vulnerability is fixed in 0.5.0b3.dev100.

• CWE-918

• https://github.com/pyload/pyload/security/advisories/GHSA-8rp3-xc6w-5qp5
• https://github.com/pyload/pyload/security/advisories/GHSA-8rp3-xc6w-5qp5

Published

May 28, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46556FlaskBB is a Forum Software written in Python using the micr…6.5
• CVE-2026-46557ImageMagick is free and open-source software used for editin…6.2
• CVE-2026-46558Plane is an open-source project management tool. Prior to ve…8.3
• CVE-2026-46559ImageMagick is free and open-source software used for editin…4
• CVE-2026-4656Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-46560Open Access Management (OpenAM) is an access management solu…7.5
• CVE-2026-46562Yamcs is a mission control framework. Prior to 5.12.7, the N…9.8
• CVE-2026-46569In NTFS-3G before 2026.7.7, a heap buffer overflow exists in…7.7
• CVE-2026-4657The Easy Google Fonts plugin for WordPress is vulnerable to …6.4
• CVE-2026-46570In NTFS-3G before 2026.7.7, a heap buffer overflow exists in…8.1
• CVE-2026-46571In NTFS-3G before 2026.7.7, a out-of-bounds read exists in n…5.5
• CVE-2026-46572In NTFS-3G before 2026.7.7, a heap buffer overflow exists in…7.4