← Back to Dashboard

CVE-2026-101005

HIGH NVD
CVSS Score
7.3
Severity
HIGH
Source
NVD
Published
Sep 28, 2026
Description

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. Upgrading to version 4.3.5 is able to mitigate this issue. You should upgrade the affected component.

View Full Details ← Back