CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-21885

Miniflux 2 is an open source feed reader. Prior to version 2.2.16, Miniflux's media proxy endpoint (`GET /proxy/{encodedDigest}/{encodedURL}`) can be abused to perform Server-Side Request Forgery (SSRF). An authenticated user can cause Miniflux to generate a signed proxy URL for attacker-chosen media URLs embedded in feed entry content, including internal addresses (e.g., localhost, private RFC1918 ranges, or link-local metadata endpoints). Requesting the resulting `/proxy/...` URL makes Miniflux fetch and return the internal response. Version 2.2.16 fixes the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.5%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-21885

Miniflux Project » Miniflux » Version: 2.0.0

cpe:2.3:a:miniflux_project:miniflux:2.0.0
Miniflux Project » Miniflux » Version: 2.0.1

cpe:2.3:a:miniflux_project:miniflux:2.0.1
Miniflux Project » Miniflux » Version: 2.0.10

cpe:2.3:a:miniflux_project:miniflux:2.0.10
Miniflux Project » Miniflux » Version: 2.0.11

cpe:2.3:a:miniflux_project:miniflux:2.0.11
Miniflux Project » Miniflux » Version: 2.0.12

cpe:2.3:a:miniflux_project:miniflux:2.0.12
Miniflux Project » Miniflux » Version: 2.0.13

cpe:2.3:a:miniflux_project:miniflux:2.0.13
Miniflux Project » Miniflux » Version: 2.0.14

cpe:2.3:a:miniflux_project:miniflux:2.0.14
Miniflux Project » Miniflux » Version: 2.0.15

cpe:2.3:a:miniflux_project:miniflux:2.0.15
Miniflux Project » Miniflux » Version: 2.0.16

cpe:2.3:a:miniflux_project:miniflux:2.0.16
Miniflux Project » Miniflux » Version: 2.0.17

cpe:2.3:a:miniflux_project:miniflux:2.0.17
Miniflux Project » Miniflux » Version: 2.0.18

cpe:2.3:a:miniflux_project:miniflux:2.0.18
Miniflux Project » Miniflux » Version: 2.0.19

cpe:2.3:a:miniflux_project:miniflux:2.0.19
Miniflux Project » Miniflux » Version: 2.0.2

cpe:2.3:a:miniflux_project:miniflux:2.0.2
Miniflux Project » Miniflux » Version: 2.0.20

cpe:2.3:a:miniflux_project:miniflux:2.0.20
Miniflux Project » Miniflux » Version: 2.0.21

cpe:2.3:a:miniflux_project:miniflux:2.0.21
Miniflux Project » Miniflux » Version: 2.0.22

cpe:2.3:a:miniflux_project:miniflux:2.0.22
Miniflux Project » Miniflux » Version: 2.0.23

cpe:2.3:a:miniflux_project:miniflux:2.0.23
Miniflux Project » Miniflux » Version: 2.0.24

cpe:2.3:a:miniflux_project:miniflux:2.0.24
Miniflux Project » Miniflux » Version: 2.0.25

cpe:2.3:a:miniflux_project:miniflux:2.0.25
Miniflux Project » Miniflux » Version: 2.0.26

cpe:2.3:a:miniflux_project:miniflux:2.0.26
Miniflux Project » Miniflux » Version: 2.0.27

cpe:2.3:a:miniflux_project:miniflux:2.0.27
Miniflux Project » Miniflux » Version: 2.0.28

cpe:2.3:a:miniflux_project:miniflux:2.0.28
Miniflux Project » Miniflux » Version: 2.0.29

cpe:2.3:a:miniflux_project:miniflux:2.0.29
Miniflux Project » Miniflux » Version: 2.0.3

cpe:2.3:a:miniflux_project:miniflux:2.0.3
Miniflux Project » Miniflux » Version: 2.0.30

cpe:2.3:a:miniflux_project:miniflux:2.0.30
Miniflux Project » Miniflux » Version: 2.0.31

cpe:2.3:a:miniflux_project:miniflux:2.0.31
Miniflux Project » Miniflux » Version: 2.0.32

cpe:2.3:a:miniflux_project:miniflux:2.0.32
Miniflux Project » Miniflux » Version: 2.0.33

cpe:2.3:a:miniflux_project:miniflux:2.0.33
Miniflux Project » Miniflux » Version: 2.0.34

cpe:2.3:a:miniflux_project:miniflux:2.0.34
Miniflux Project » Miniflux » Version: 2.0.35

cpe:2.3:a:miniflux_project:miniflux:2.0.35
Miniflux Project » Miniflux » Version: 2.0.36

cpe:2.3:a:miniflux_project:miniflux:2.0.36
Miniflux Project » Miniflux » Version: 2.0.37

cpe:2.3:a:miniflux_project:miniflux:2.0.37
Miniflux Project » Miniflux » Version: 2.0.38

cpe:2.3:a:miniflux_project:miniflux:2.0.38
Miniflux Project » Miniflux » Version: 2.0.39

cpe:2.3:a:miniflux_project:miniflux:2.0.39
Miniflux Project » Miniflux » Version: 2.0.4

cpe:2.3:a:miniflux_project:miniflux:2.0.4
Miniflux Project » Miniflux » Version: 2.0.40

cpe:2.3:a:miniflux_project:miniflux:2.0.40
Miniflux Project » Miniflux » Version: 2.0.41

cpe:2.3:a:miniflux_project:miniflux:2.0.41
Miniflux Project » Miniflux » Version: 2.0.42

cpe:2.3:a:miniflux_project:miniflux:2.0.42
Miniflux Project » Miniflux » Version: 2.0.43

cpe:2.3:a:miniflux_project:miniflux:2.0.43
Miniflux Project » Miniflux » Version: 2.0.44

cpe:2.3:a:miniflux_project:miniflux:2.0.44
Miniflux Project » Miniflux » Version: 2.0.45

cpe:2.3:a:miniflux_project:miniflux:2.0.45
Miniflux Project » Miniflux » Version: 2.0.46

cpe:2.3:a:miniflux_project:miniflux:2.0.46
Miniflux Project » Miniflux » Version: 2.0.47

cpe:2.3:a:miniflux_project:miniflux:2.0.47
Miniflux Project » Miniflux » Version: 2.0.48

cpe:2.3:a:miniflux_project:miniflux:2.0.48
Miniflux Project » Miniflux » Version: 2.0.49

cpe:2.3:a:miniflux_project:miniflux:2.0.49
Miniflux Project » Miniflux » Version: 2.0.5

cpe:2.3:a:miniflux_project:miniflux:2.0.5
Miniflux Project » Miniflux » Version: 2.0.50

cpe:2.3:a:miniflux_project:miniflux:2.0.50
Miniflux Project » Miniflux » Version: 2.0.51

cpe:2.3:a:miniflux_project:miniflux:2.0.51
Miniflux Project » Miniflux » Version: 2.0.6

cpe:2.3:a:miniflux_project:miniflux:2.0.6
Miniflux Project » Miniflux » Version: 2.0.7

cpe:2.3:a:miniflux_project:miniflux:2.0.7
Miniflux Project » Miniflux » Version: 2.0.8

cpe:2.3:a:miniflux_project:miniflux:2.0.8
Miniflux Project » Miniflux » Version: 2.0.9

cpe:2.3:a:miniflux_project:miniflux:2.0.9
Miniflux Project » Miniflux » Version: 2.1.0

cpe:2.3:a:miniflux_project:miniflux:2.1.0
Miniflux Project » Miniflux » Version: 2.1.1

cpe:2.3:a:miniflux_project:miniflux:2.1.1
Miniflux Project » Miniflux » Version: 2.1.2

cpe:2.3:a:miniflux_project:miniflux:2.1.2
Miniflux Project » Miniflux » Version: 2.1.3

cpe:2.3:a:miniflux_project:miniflux:2.1.3
Miniflux Project » Miniflux » Version: 2.1.4

cpe:2.3:a:miniflux_project:miniflux:2.1.4
Miniflux Project » Miniflux » Version: 2.2.0

cpe:2.3:a:miniflux_project:miniflux:2.2.0
Miniflux Project » Miniflux » Version: 2.2.1

cpe:2.3:a:miniflux_project:miniflux:2.2.1
Miniflux Project » Miniflux » Version: 2.2.10

cpe:2.3:a:miniflux_project:miniflux:2.2.10
Miniflux Project » Miniflux » Version: 2.2.11

cpe:2.3:a:miniflux_project:miniflux:2.2.11
Miniflux Project » Miniflux » Version: 2.2.12

cpe:2.3:a:miniflux_project:miniflux:2.2.12
Miniflux Project » Miniflux » Version: 2.2.13

cpe:2.3:a:miniflux_project:miniflux:2.2.13
Miniflux Project » Miniflux » Version: 2.2.14

cpe:2.3:a:miniflux_project:miniflux:2.2.14
Miniflux Project » Miniflux » Version: 2.2.15

cpe:2.3:a:miniflux_project:miniflux:2.2.15
Miniflux Project » Miniflux » Version: 2.2.2

cpe:2.3:a:miniflux_project:miniflux:2.2.2
Miniflux Project » Miniflux » Version: 2.2.3

cpe:2.3:a:miniflux_project:miniflux:2.2.3
Miniflux Project » Miniflux » Version: 2.2.4

cpe:2.3:a:miniflux_project:miniflux:2.2.4
Miniflux Project » Miniflux » Version: 2.2.5

cpe:2.3:a:miniflux_project:miniflux:2.2.5
Miniflux Project » Miniflux » Version: 2.2.6

cpe:2.3:a:miniflux_project:miniflux:2.2.6
Miniflux Project » Miniflux » Version: 2.2.7

cpe:2.3:a:miniflux_project:miniflux:2.2.7
Miniflux Project » Miniflux » Version: 2.2.8

cpe:2.3:a:miniflux_project:miniflux:2.2.8
Miniflux Project » Miniflux » Version: 2.2.9

cpe:2.3:a:miniflux_project:miniflux:2.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-21885

Products

Pricing

Contact Us