CVE-2026-101005

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

EUVD-2026-88093

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...

PT-2026-99770

Name of the Vulnerable Software and Affected Versions October CMS versions prior to 4.3.5 Description A server-side request forgery SSRF issue exists in the SSRF Protection component. The flaw is located within the validateExternalImageHost function of the System/Classes/ResizeImages.php file,...

CVE-2026-101005: Server-Side Request Forgery (SSRF)

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is n...