CVE-2026-112076 — MeTube feed-metadata thumbnail fetch server-side request forgery

CVE-2026-112076 is a vulnerability in alexta69 MeTube affecting versions up to 2026.09.28. The vulnerability enables server-side request forgery (SSRF) and can be attacked remotely. The source states that attacks are highly complex and exploitation is difficult; the exploit has been publicly disclosed and may be used.