CVE-2026-32133 | Bubka 2FAuth up to 6.0.x Image Parser image server-side request forgery (GHSA-8qp3-x2mp-j6f8)

A vulnerability was found in Bubka 2FAuth up to 6.0.x. It has been rated as critical. Affected by this issue is some unknown functionality of the component Image Parser. Performing a manipulation of the argument image results in server-side request forgery.

This vulnerability is reported as CVE-2026-32133. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.