CVE-2026-107046

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan internal resources via supplying a crafted URL.

Affected packages

Ecosystem	Package	Introduced	Fixed