Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the argument img leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
CVE-2026-3286 A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/gith… https://www.cve.org/CVERecord?id=CVE-2026-3286
Post summary
The post reports the existence of CVE‑2026‑3286 affecting several versions of itwanger paicoding, but provides no actionable details such as PoC, exploit code, or mitigation information.
CVE-2026-3286 Server-Side Request Forgery in Paicoding Image Save Endpoint Befor... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3286 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
An SSRF vulnerability (CVE‑2026‑3286) affecting the Paicoding Image Save endpoint has been disclosed, but no PoC, exploit, or patch details are included.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | itwanger | paicoding | 1.0.0 | - | - |
| App | itwanger | paicoding | 1.0.1 | - | - |
| App | itwanger | paicoding | 1.0.2 | - | - |
| App | itwanger | paicoding | 1.0.3 | - | - |