high
advisory
EyouCMS: Server-side request forgery (CVE-2026-116094)
EyouCMS versions up to 1.8.3 contain a server-side request forgery (SSRF) vulnerability in the remote_file_to_local function of application/function.php.
CVE search metadata
CVE search record: CVE-2026-116094. Severity: high. CVSS: 7.3. KEV: no. Product: EyouCMS (<= 1.8.3). Brief: EyouCMS: Server-side request forgery (CVE-2026-116094). Brief link: https://feed.craftedsignal.io/briefs/2026-10-eyoucms-ssrf/
Triage facts
Revision 1- Applicability
- EyouCMS (<= 1.8.3)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 25, 22:30 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability has been identified in EyouCMS up to version 1.8.3. The vulnerability affects the function remote_file_to_local within the file application/function.php. This flaw allows for remote server-side request forgery (SSRF). The exploit has been publicly disclosed and may be utilized. The vendor was contacted but did not respond.