CVE-2026-18856
Full vulnerability record from the local CVENow database.
Description
A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. This manipulation of the argument filename causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.34 will fix this issue. It is recommended to upgrade the affected component.
Severity
LOW
CVSS score
2.0
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-08-05 01:16:44.757000
Last modified
2026-10-23 21:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-18856",
"sourceIdentifier": "[email protected]",
"published": "2026-08-05T01:16:44.757",
"lastModified": "2026-10-23T21:10:00.157",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. This manipulation of the argument filename causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.34 will fix this issue. It is recommended to upgrade the affected component."
},
{
"lang": "es",
"value": "Una vulnerabilidad fue determinada en Poesis Rhymix CMS hasta 2.1.33. Esto impacta la función procImporterAdminCheckXmlFile del archivo modules/importer/importer.admin.controller.php del componente Módulo de Importación de Datos. Esta manipulación del argumento filename causa falsificación de petición del lado del servidor. El ataque es posible de ser llevado a cabo remotamente. El exploit ha sido divulgado públicamente y puede ser utilizado. Actualizar a la versión 2.1.34 solucionará este problema. Se recomienda actualizar el componente afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Poesis",
"product": "Rhymix CMS",
"cpes": [
"cpe:2.3:a:poesis:rhymix_cms:*:*:*:*:*:*:*:*"
],
"modules": [
"Data Import Module"
],
"versions": [
{
"version": "2.1.0",
"status": "affected"
},
{
"version": "2.1.1",
"status": "affected"
},
{
"version": "2.1.2",
"status": "affected"
},
{
"version": "2.1.3",
"status": "affected"
},
{
"version": "2.1.4",
"status": "affected"
},
{
"version": "2.1.5",
"status": "affected"
},
{
"version": "2.1.6",
"status": "affected"
},
{
"version": "2.1.7",
"status": "affected"
},
{
"version": "2.1.8",
"status": "affected"
},
{
"version": "2.1.9",
"status": "affected"
},
{
"version": "2.1.10",
"status": "affected"
},
{
"version": "2.1.11",
"status": "affected"
},
{
"version": "2.1.12",
"status": "affected"
},
{
"version": "2.1.13",
"status": "affected"
},
{
"version": "2.1.14",
"status": "affected"
},
{
"version": "2.1.15",
"status": "affected"
},
{
"version": "2.1.16",
"status": "affected"
},
{
"version": "2.1.17",
"status": "affected"
},
{
"version": "2.1.18",
"status": "affected"
},
{
"version": "2.1.19",
"status": "affected"
},
{
"version": "2.1.20",
"status": "affected"
},
{
"version": "2.1.21",
"status": "affected"
},
{
"version": "2.1.22",
"status": "affected"
},
{
"version": "2.1.23",
"status": "affected"
},
{
"version": "2.1.24",
"status": "affected"
},
{
"version": "2.1.25",
"status": "affected"
},
{
"version": "2.1.26",
"status": "affected"
},
{
"version": "2.1.27",
"status": "affected"
},
{
"version": "2.1.28",
"status": "affected"
},
{
"version": "2.1.29",
"status": "affected"
},
{
"version": "2.1.30",
"status": "affected"
},
{
"version": "2.1.31",
"status": "affected"
},
{
"version": "2.1.32",
"status": "affected"
},
{
"version": "2.1.33",
"status": "affected"
},
{
"version": "2.1.34",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.0,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.4,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-05T16:19:26.715375Z",
"id": "CVE-2026-18856",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"references": [
{
"url": "https://github.com/MCzhao2006/Rhymix-SSRF-Report",
"source": "[email protected]"
},
{
"url": "https://rhymix.org/files/attach/releases/rhymix-2.1.34.zip",
"source": "[email protected]"
},
{
"url": "https://rhymix.org/news/1948042",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-18856",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/858471",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/385868",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/385868/cti",
"source": "[email protected]"
}
]
}