SearchLeak CSP Bypass via Bing Search-by-Image SSRF Exfiltration

Ibrahim Saud@tektrix

•updated Jun 30, 2026•2•0•5

Detects outbound requests to the Bing 'searchbyimage' endpoint where the 'imgurl' parameter points to an external (non-trusted) domain. This pattern is indicative of potential SSRF exploitation, such as the described SearchLeak (CVE-2026-42824) vulnerability chain, where an attacker uses Bing's search functionality as a proxy to reach internal or restricted infrastructure.