CVE-2026-35036 | lin-snow Ech0 up to 4.2.7 Response Body /api/website/title server-side request forgery (GHSA-wc4h-2348-jc3p)

A vulnerability described as critical has been identified in lin-snow Ech0 up to 4.2.7. This issue affects some unknown processing of the file /api/website/title of the component Response Body Handler. Executing a manipulation can lead to server-side request forgery.

This vulnerability is tracked as CVE-2026-35036. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.