CVE-2026-116094

A vulnerability was determined in EyouCMS up to 1.8.3. This impacts the function remote_file_to_local of the file application/function.php. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-918

• https://github.com/yy-t1/security-reports/tree/main/web/EyouCMS1.8.2/remote_file_to_local()%E7%BC%BA%E5%A4%B1%20SSRF%20%E6%A0%A1%E9%AA%8C%E5%AF%BC%E8%87%B4%E5%89%8D%E5%8F%B0%20SSRF
• https://vuldb.com/cve/CVE-2026-116094
• https://vuldb.com/submit/1000661
• https://vuldb.com/vuln/426161
• https://vuldb.com/vuln/426161/cti

Published

Oct 25, 2026

Last Modified

Oct 26, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-116070Docker-Proxy through 5.1.9 contains a missing authentication…6.5
• CVE-2026-116071rotki before 1.44.2 contains a weak key derivation vulnerabi…5.9
• CVE-2026-116072Infinity for Reddit through 8.3.4 contains a login cross-sit…5.4
• CVE-2026-116073Leon before commit 50df142 contains a path traversal vulnera…6.5
• CVE-2026-11608The WP Customer Reviews plugin for WordPress is vulnerable t…6.1
• CVE-2026-11609Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-116095A vulnerability was identified in smg-project smg 1.7.0/1.8.…5.3
• CVE-2026-116096A weakness has been identified in ggml-org llama.cpp. Affect…5.3
• CVE-2026-116097A security vulnerability has been detected in CloudClassroom…4.3
• CVE-2026-116098A vulnerability was detected in SteelRaven7 Ravenfield 25407…6.3
• CVE-2026-116099A flaw has been found in Fusion Creators Studio SCP Containm…6.3
• CVE-2026-1161A vulnerability was detected in pbrong hrms 1.0.1. The affec…3.5