CyberSecBulletin

MagicMirrorOrg vulnerabilities

We track 1 vulnerability in MagicMirrorOrg products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest MagicMirrorOrg vulnerabilities

  • 8.6 High severity

    MagicMirror: Server-Side Request Forgery

    CVE-2026-42281MagicMirrorOrgEPSS 1.62%

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP reque