Magicmirror Magicmirror vulnerabilities

• magicmirror MagicMirror²: Unauthenticated SSRF via /cors endpoint CVE-2026-42281 Public exploitFix available 9.2 CriticalMay 5, 2026