CVE-2026-116094

{
  "etk_id": "ETK-2026-2619",
  "cve_id": "CVE-2026-116094",
  "display_id": "CVE-2026-116094",
  "ghsa_id": "GHSA-fmmj-g7fc-9hcf",
  "euvd_id": "EUVD-2026-109573",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Server-side request forgery in EyouCMS remote file retrieval",
  "summary": "EyouCMS versions through 1.8.3 are affected by a server-side request forgery flaw in remote file retrieval handling. A remote unauthenticated attacker may cause the server to issue requests to attacker-selected network resources if they can reach functionality that invokes the affected operation.",
  "mitigation": "Restrict outbound connections from EyouCMS hosts, especially to internal networks and cloud metadata endpoints, and limit access to features that perform remote file retrieval. No fixed release is identified in the supplied evidence; verify a vendor patch before upgrading.",
  "vendor": null,
  "product": "EyouCMS",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "1.8.0",
        "1.8.1",
        "1.8.2",
        "1.8.3"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "EyouCMS",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 42.9376246,
  "t0_at": "2026-10-25T21:45:13.041000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-09-25T15:06:50+00:00",
      "days": -30.27665556712963,
      "is_lower_bound": false,
      "measured_at": "2026-10-25T21:45:13.041000+00:00",
      "url": "https://github.com/yy-t1/security-reports"
    },
    "trigger_signal": {
      "at": "2026-10-25T21:45:13.041000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-25T21:45:13.041000+00:00",
      "url": "https://github.com/advisories/GHSA-fmmj-g7fc-9hcf"
    }
  }
}