CVE-2026-36469
🔶 mediumSummary
CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload by URL" functionality).
CVSS Score
-
EPSS Score
0.2
Exploit Probability
Published Date
2026-09-21
First Seen: 2026-09-24
Last Modified
2026-09-22
Source
NVD 🔗