{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/eyoucms/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:eyoucms:eyoucms:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-116094"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["EyouCMS (\u003c= 1.8.3)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["EyouCMS"],"content_html":"\u003cp\u003eA vulnerability has been identified in EyouCMS up to version 1.8.3. The vulnerability affects the function remote_file_to_local within the file application/function.php. This flaw allows for remote server-side request forgery (SSRF). The exploit has been publicly disclosed and may be utilized. The vendor was contacted but did not respond.\u003c/p\u003e\n","date_modified":"2026-10-25T22:30:07Z","date_published":"2026-10-25T22:30:07Z","id":"https://feed.craftedsignal.io/briefs/2026-10-eyoucms-ssrf/","summary":"EyouCMS versions up to 1.8.3 contain a server-side request forgery (SSRF) vulnerability in the remote_file_to_local function of application/function.php.","title":"EyouCMS: Server-side request forgery (CVE-2026-116094)","url":"https://feed.craftedsignal.io/briefs/2026-10-eyoucms-ssrf/"}],"language":"en","title":"CraftedSignal Threat Feed - EyouCMS","version":"https://jsonfeed.org/version/1.1"}