Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest (used by the parse_urls API). An authenticated attacker can supply a URL pointing to an attacker-controlled server that responds with a 302 redirect to an internal/private IP address, bypassing the is_global_host() check on the initial URL. This vulnerability is fixed in 0.5.0b3.dev100.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-46561 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest… https://www.cve.org/CVERecord?id=CVE-2026-46561
Post summary
The post briefly references CVE-2026-46561 in pyLoad, noting a missing private‑IP check before version 0.5.0b3.dev100, but it offers no PoC, exploit, or patch details.
🚨*CVE* CVE-2026-46561 pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the PREREQFUNCTION-based private IP check was not applied to HTTPRequest… https://www.cve.org/CVERecord?id=CVE-2026-46561 ----- Traducción: CVE-2026-46561 pyL… http://infoflow.cloud`
Post summary
The post outlines CVE‑2026‑46561 in pyLoad, noting that the private IP check was missing pre‑0.5.0b3.dev100 and is fixed in that version.
CVE-2026-46561 Server-Side Request Forgery in pyLoad Prior to 0.5.0b3.dev100 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46561
Post summary
The text announces a new CVE (CVE‑2026‑46561) for a Server‑Side Request Forgery vulnerability in pyLoad, providing the vulnerability type but no PoC, exploit, or mitigation details.