CVE-2026-19504 is a Server-Side Request Forgery (SSRF) vulnerability in the loadFromJSON method of Fabric.js. It allows remote attackers to cause the application to access unintended network resources due to improper URI validation. Exploitation requires interaction with the library, and attack vectors depend on the specific implementation. The vulnerability has a medium severity rating with a CVSS score of 4.0.