CVE-2026-50886: Project Firefly III has incorrect access control in the webhook management component

Severity: Critical

CVSS Score: 9.1

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request.