CVE-2026-62030: CWE-918 Server-Side Request Forgery (SSRF) in bPlugins StreamCast

This vulnerability (CVE-2026-62030) is an unauthenticated Server-Side Request Forgery (SSRF) in bPlugins StreamCast affecting versions up to 2.4.5. SSRF vulnerabilities allow attackers to make the server perform unauthorized requests, potentially accessing internal resources or services. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a scope change and partial impact on confidentiality and integrity. No known exploits are reported in the wild, and no vendor patch or advisory information is currently available.

Successful exploitation could allow an unauthenticated attacker to cause the StreamCast server to send crafted requests to internal or external systems, potentially exposing sensitive information or manipulating internal services. The impact affects confidentiality and integrity but does not affect availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to the StreamCast server to trusted sources and monitoring for unusual outbound requests that could indicate SSRF exploitation attempts.