CVE-2026-116094 | EyouCMS up to 1.8.3 application/function.php remote_file_to_local server-side request forgery

October 25, 2026 Yanac

A vulnerability classified as critical was found in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-116094. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More