A vulnerability, which was classified as critical, has been found in PinchTab up to 0.7.6. Affected by this vulnerability is an unknown functionality of the file /download of the component Internal Network Service Handler. The manipulation leads to server-side request forgery.
This vulnerability is traded as CVE-2026-30834. It is possible to initiate the attack remotely. There is no exploit available.
It is advisable to upgrade the affected component.