PatchSiren

EyouCMS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM EyouCMS CVE published 2026-10-25

CVE-2026-116094

A server-side request forgery vulnerability was determined in EyouCMS up to 1.8.3, impacting the function remote_file_to_local of the file application/function.php. This CVE record was published on 2026-10-25T21:45:13.041Z and has not been modified since then. The NVD entry is currently unclassified. The vulnerability allows attackers to manipulate the remote_file_to_local function, potentially leading to [truncated]