A vulnerability, which was classified as critical, was found in welovemedia FFmate up to 2.0.15. This affects the function
fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery.
This vulnerability is tracked as CVE-2026-3681. The attack can be launched remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
