CVE-2026-36469 PUBLISHED

Assigner: mitre
Reserved: 06.04.2026 Published: 21.09.2026 Updated: 21.09.2026

CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload by URL" functionality).

Product Status

Vendor n/a
Product n/a
Versions
  • Version n/a is affected

References

Problem Types

  • n/a text