CVE-2026-36469

CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery SSRF in core/modules/media.php -- uploadfrominet Media Manager's "Upload by URL" functionality...

CVE-2026-36469

CuteNews v.2.1.2 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the core/modules/media.php file, specifically within the upload_from_inet function used by the Media Manager's "Upload by URL" feature. An attacker can leverage this to make the server issue requests to arbitrar...