PT-2026-29093 · Sourcecodester · Rss Feed Parser

Hemant Raj Bhati · Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-5126

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file get contents. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-5126

Affected Products

Rss Feed Parser

References · 6

• 🔥 https://medium.com/@hemantrajbhati5555/discovering-a-blind-ssrf-vulnerability-in-a-php-rss-feed-parser-243f3ccbdafb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5126 · Security Note
• https://vuldb.com/submit/780180 · Note
• https://vuldb.com/vuln/354158 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/354158/cti · Note