CVE-2026-42281: Unauthenticated SSRF in MagicMirror²
I have a Raspberry Pi collection that has slowly taken on a life of its own. Each model has its own project, and I periodically end up on YouTube looking for new ideas. That’s how I came across MagicMirror²: an open-source smart mirror that uses a Raspberry Pi to project a series of interactive dashboards, news, weather, calendar, and public transport schedules onto a two-way mirror monitor. The end result looks great, and the project has an active community of people building custom modules. ...