Information Disclosure Vulnerability in Forocoches Comments Editor

CVE-2026-14467

What is CVE-2026-14467?

The Forocoches comments editor is affected by a vulnerability that enables attackers to retrieve unauthorized user information. By embedding a malicious external URL in an image within a comment, an attacker can trigger a browser request when a victim views the comment thread. This request can expose sensitive user data, including the source IP address, User-Agent header, and timestamps, thereby compromising user privacy and confidentiality.

References