CVE-2026-59552 is a Server-Side Request Forgery (SSRF) vulnerability affecting 3D Flipbook PDF Viewer & Embedder versions up to 1.4.2. The vulnerability is unauthenticated, meaning an attacker does not need credentials to exploit it. The SSRF flaw can cause the server to make unintended requests, potentially exposing or modifying sensitive data. The CVSS v3.1 base score is 7.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. No patch or official remediation level has been published at this time.

Successful exploitation could allow an attacker to cause the vulnerable server to make arbitrary requests, potentially leading to partial disclosure of sensitive information and unauthorized modification of data. There is no indication of availability impact. The vulnerability is exploitable remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently available.