CVE-2026-116094

HIGH 7.3

EyouCMS function.php remote_file_to_local server-side request forgery

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-918
Vendor	n/a
Product	eyoucms
Published	Oct 25, 2026

Stay Ahead of the Next One

Get instant alerts for n/a eyoucms

Be the first to know when new high vulnerabilities affecting n/a eyoucms are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / EyouCMS

1.8.0 1.8.1 1.8.2 1.8.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/426161 vuldb.com: https://vuldb.com/vuln/426161/cti vuldb.com: https://vuldb.com/cve/CVE-2026-116094 vuldb.com: https://vuldb.com/submit/1000661 github.com: https://github.com/yy-t1/security-reports/tree/main/web/EyouCMS1.8.2/remote_file_to_local()%E7%BC%BA%E5%A4%B1%20SSRF%20%E6%A0%A1%E9%AA%8C%E5%AF%BC%E8%87%B4%E5%89%8D%E5%8F%B0%20SSRF

Credits

🔍 bsahfm (VulDB User) VulDB CNA Team